I have a serious infection

samdd

jamespir wrote: »

download process explorer (bit like task manager but more advanced ) find the virus (in the processes (usually 3 letters.exe and right click it will give you the location of the file) kill the process and then delete the virus restart your pc and it should have got rid of it

I downloaded and tried to run but i got the error msg below. Its the same as i get whenever i trie to use anything to clean or identify the malware.

TakeThis

samdd wrote: »

I downloaded and tried to run but i got the error msg below. Its the same as i get whenever i trie to use anything to clean or identify the malware.

Did you run it as Administrator? Right Click on the file in order to do so.

samdd

TakeThis wrote: »

Try this..

Isnt spyware doctor a free scan but you have to pay for the software to remove the malware?

Floralise

Ooops sorry, i thought you were dying. Sorry!

TakeThis

samdd wrote: »

Isnt spyware doctor a free scan but you have to pay for the software to remove the malware?

What has Spyware Doctor to do with it? Are you being re-directed?

samdd

TakeThis wrote: »

Did you run it as Administrator? Right Click on the file in order to do so.

Yes, i ran as admin and without admin both ways produced the same results.

samdd

TakeThis wrote: »

What has Spyware Doctor to do with it? Are you being re-directed?

Sorry mate.. saw the spyware doctor before scrolling down.. i'll try it now.. thanks

TakeThis

Using the ZeroAccess/Max++ rootkit remover to remove ZeroAccess (Sirefef/MAX++) rootkit.

1. Download the ZeroAccess/Max++ rootkit remover: http://anywhere.webrootcloudav.com/antizeroaccess.exe

2. Double-click on antizeroaccess icon to run it. It will ask you to verify that you want to perform a System scan. Type Y and press Enter.




Once finished, press Enter or any key to continue.

3. If your computer is infected with Zero Access rootkit, you'll see the following warning: Your system is infected!!



Infected file: mrxsmb.sys. In your case it might be different. Type Y and press Enter to perform system cleanup.

You should know see the notification that ZeroAccess rootkit has been successfully removed from the system. Press any key to exit the utility and restart your computer.



4. Run ZeroAccess/Max++ rootkit remover once again to confirm that ZeroAccess/Sirefef/MAX++ rootkit was successfully removed from your computer. That's it!

samdd

results of the webroot scan, everything come back clean except this..

samdd

TakeThis wrote: »

Using the ZeroAccess/Max++ rootkit remover to remove ZeroAccess (Sirefef/MAX++) rootkit.

1. Download the ZeroAccess/Max++ rootkit remover: http://anywhere.webrootcloudav.com/antizeroaccess.exe

2. Double-click on antizeroaccess icon to run it. It will ask you to verify that you want to perform a System scan. Type Y and press Enter.




Once finished, press Enter or any key to continue.

3. If your computer is infected with Zero Access rootkit, you'll see the following warning: Your system is infected!!



Infected file: mrxsmb.sys. In your case it might be different. Type Y and press Enter to perform system cleanup.

You should know see the notification that ZeroAccess rootkit has been successfully removed from the system. Press any key to exit the utility and restart your computer.



4. Run ZeroAccess/Max++ rootkit remover once again to confirm that ZeroAccess/Sirefef/MAX++ rootkit was successfully removed from your computer. That's it!

Iv'e run the sacn 3 times but the infection hasnt been removed. Even though there is an infection its telling me that the system is clean, As below.