Emul:mem Worm. Rootkit.ZEROACCESS.

Viruses and worms
21

No that is part of Daemon tools

Could you post the combofix log as well please

Warning This fix is only relevant for this system and no other, using on another computer may cause problems

Be advised that when the fix commences it will shut down all running processes and you may lose the desktop and icons, they will return on reboot

If you have Malwarebytes 1.6 or better installed please disable it for the duration of this run

Run OTL

[*]Under the Custom Scans/Fixes box at the bottom, paste in the following

:OTL DRV - File not found [Kernel | On_Demand | Unknown] -- -- (apfzdlkn) [2011/12/24 11:10:38 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\X3yrloHLj.com.b [2011/12/24 07:09:55 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\XR6uA1.dat [2011/12/13 07:29:33 | 000,014,652 | -HS- | C] () -- C:\Documents and Settings\All Users\Application Data\u4ta17f1qa5cvh [2011/12/13 07:29:32 | 000,014,652 | -HS- | C] () -- C:\Documents and Settings\Marcelo\Local Settings\Application Data\u4ta17f1qa5cvh [2011/08/28 04:59:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Marcelo\Application Data\searchquband

:Files
ipconfig /flushdns /c

:Commands
[purity]
[resethosts]
[emptytemp]
[CREATERESTOREPOINT]
[Reboot]


[*]Then click the Run Fix button at the top
[*]Let the program run unhindered, reboot the PC when it is done
[*]Open OTL again and click the Quick Scan button. Post the log it produces in your next reply.

The net problem could be a nightmare to fix

Could you go to add remove and select show updates
Uninstall this update
KB951748

Download a fresh copy from here http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=17852

Reboot and try the net

22

Combofix log

23

Looks like the malware has gone, apart from the internet what other problems are you having ?

24

New Otl logs

25

so far. nothing out of normal. i will be watching closely for changes. im now going to do the update for the internet. if this helps. the only thing in the networks in control panel is 1394 connection 2

26

OK if this does not work I will get some network commands together

27

the update cannot be removed

28

should i try the install anyway?

29

Yes try the install over the top

30

trying now

31

restarting pc now

32

still unable to connect to the internet. shows the same connection in network connections. and same error in the repair

33

Lets have a look see

At cmd prompt C:>
type
netsh -c diag

then when that loads
type
show test

Could you copy and paste the result

34

test logs

35

there is the logs.

36

Hey guys, really sorry to post in here… but is my one fixed? I think Essex may have gone to bed… :frowning:

37

@adotd thats all fixed already. i just have a internet connection problem

38

OK could you open internet explorer and in the address bar type

204.145.81.68

Let me know if you can access a site with that, also let me know what site it was

The next phase would be to uninstall SP3 3

and then rebuild the network stuff

39

ok. let me get the laptop