Inactive System infected: ZeroAccess Rootkit Activity 4 and TidServ Activity 2

First of all I'm not sure if RW will work but you can give it a shot.
Get ImgBurn.
Open it.
Click on "Write image file to disc".
Click on a first icon next to "Please select a file..." and navigate to .iso file location.
 
Thank you, Broni. Before being able to burn the disk, imgburn said it needed to be formatted first, and asked me if I wanted to do that now; I clicked yes, and so now it's being formatted . Hopefully, everything will go all right from now on. I just keep my fingers crossed... but we all know how Murphy's law works...
 
I meant to say "now" not "mow"... sorry for the typo... Anyway, what exactly shall I do now... The infected computer is from 2007. I'm not sure it supports boot from cd feature. If I'm supposed to set Bios to boot from CDROM now, how exactly do I get to the boot screen. I read the instructions but they're not very clear.
 
I bought the infected computer brand new at the store in late December 2007. It's a Hewlett Packard with Vista 32.
 
It surely supports booting from DVD.
Put the DVD in and restart computer.
Watch the screen.
At some point after HP logo it should say:
"Press any key to boot from CD".
Press any key.

If it doesn't happen then we'll check BIOS.
 
The fact that the infected pc was only booting all the way in safe mode isn't important at this time, right? I should still follow your previous instructions, right? Just checking.
 
One more thing, how can I open the disk compartment? Will the pc let me open immediately upon pushing the turn on button? Or how should I do this?
 
It worked. Now, it didn't give me the option to repair my pc... it's asking me
language to install
time and currency format
keyboard or input method

All exactly like the second picture (in your instructions) for windows 7 users says. Shall I follow those steps instead of the ones for vista the?
 
When you booted from the DVD was this very first screen or you clicked on "Install now" on the 1st screen?
 
Upon booting, I got that message saying "Press any key to boot from CD" like you said. So I pressed a key and then this was the very next screen.
 
Oh, I already sent you a response but it doesn't show here... strange.

Upon booting, I got that message "Press any key to boot from CD" you told me about, so I pressed a key and then, the very next screen was the one identical to windows 7.
 
Very strange.
Click "Next" button and let me know about next screen.

Do NOTHING else.
 
After clicking "Next", I have now the screen that does belong to Vista in your instructions, the one with the options
install now
what to know before installing windows
repair your computer
 
Very well.
Select "repair your computer " and continue with other steps from my reply #98.
 
Ok... I followed all your steps but it didn't boot; I got a blue screen saying there was an error and it automatically restarted. For fear I'd damage my computer, upon restarting automatically, I tapped f8 to go into safe mode.
 
Did both commands executed successfully?

What is the exact error when you try to boot normally?
 
Yes, I think both commands executed successfully but I'm not absolutely positive. I don't recall reading about anything failing though. The exact error described in the blue screen is really long (the whole screen is filled with words) and don't have time to type it but it looks the same as all previous blue screens I got whenever I tried to boot pc normally before and after virus. If you really need to know what the blue screen error says, I can try to boot normally again and then as soon as blue screens comes on, I can record in my digital voice recorder what it says and then post it here.
 
"whenever I tried to boot pc normally before and after virus" should read:

"whenever I tried to boot pc normally before (after virus)"
 
You must log in or register to reply here.

Similar threads

R
Solved Norton blocked attack by: System Infected: Miner.Bitcoinminer Activity #
2
Replies
32
Views
3K
Broni
Broni
N
Several popular Minecraft mods are infected with Fracturiser malware
Replies
0
Views
610
nanoguy
N
A
Infected: Antivirus says it's Trojan:Script/Wacatac.H!ml
Replies
12
Views
2K
adidaman27
A

Latest posts

Back