Inactive Sirefef y and b, keeps rebooting. Vista 64 ult

Status
Not open for further replies.
Sirefef y and b, cant do anything keeps rebooting. Vista 64 ult, desktop.

Noticed something odd, a website, kept activing java, then when I closed browser, java was still open in taskbar. I open Task Manger, to see it active as well as firefox, even though I closed it.

First thing Norton Internet Security blocked a Trojan or something, I look up where the file was, and find some more files I del them, then scan, with norton, Advanced system care, ccleaner.

Reboot, peerblock broken, MSE broken, Desktop icon enlarged and Icons in default arangement.

I look up the missing services which broke peerblock, find a solution for it, .Reg files someone
has posted. next reboot peerblock works and so does MSE.But now MSE dectects Sirefef y and b, tries to clean, but a power down message comes up. And every reboot, MSE has detected and tries to clean then power off again, tried in safe mode samething.

Went to sleep, wake up use spare laptop, find your posts.

Have Done Kaspersky Rescue Disk 10 scan usb boot.

Finds
c:/windows/system32/services.exe
virus/win64.Z.Acess.b
I del it

Rebooted, Got blue sceen of death

0x000000f4,
0x0000000000000003,
0xfffffA80083Aec10,
0xfffffA80083aee48,
0xfffff80002736c90

Think I have Ultimate boot Cd somehwere, I try that. See if that cant get me back to windows at least.
 
Got back into windows (via vista cd repair option), and so far not rebooting. MSE working. A pop for trojan 80000000.@ (trojan zeroacess.B)
 
Welcome aboard
yahooo.gif


Please, observe following rules:
  • Read all of my instructions very carefully. Your mistakes during cleaning process may have very serious consequences, like unbootable computer.
  • If you're stuck, or you're not sure about certain step, always ask before doing anything else.
  • Please refrain from running tools or applying updates other than those I suggest.
  • Never run more than one scan at a time.
  • Keep updating me regarding your computer behavior, good, or bad.
  • The cleaning process, once started, has to be completed. Even if your computer appears to act better, it may still be infected. Once the computer is totally clean, I'll certainly let you know.
  • If you leave the topic without explanation in the middle of a cleaning process, you may not be eligible to receive any more help in malware removal forum.
  • I close my topics if you have not replied in 5 days. If you need more time, simply let me know. If I closed your topic and you need it to be reopened, simply PM me.

========================================================

For x32 (x86) bit systems download Farbar Recovery Scan Tool 32-Bit and save it to a flash drive.
For x64 bit systems download Farbar Recovery Scan Tool 64-Bit and save it to a flash drive.

Plug the flashdrive into the infected PC.

Enter System Recovery Options.

To enter System Recovery Options from the Advanced Boot Options:
  • Restart the computer.
  • As soon as the BIOS is loaded begin tapping the F8 key until Advanced Boot Options appears.
  • Use the arrow keys to select the Repair your computer menu item.
  • Select US as the keyboard language settings, and then click Next.
  • Select the operating system you want to repair, and then click Next.
  • Select your user account an click Next.

To enter System Recovery Options by using Windows installation disc:
  • Insert the installation disc.
  • Restart your computer.
  • If prompted, press any key to start Windows from the installation disc. If your computer is not configured to start from a CD or DVD, check your BIOS settings.
  • Click Repair your computer.
  • Select US as the keyboard language settings, and then click Next.
  • Select the operating system you want to repair, and then click Next.
  • Select your user account and click Next.

On the System Recovery Options menu you will get the following options:

    • Startup Repair
      System Restore
      Windows Complete PC Restore
      Windows Memory Diagnostic Tool
      Command Prompt
  • Select Command Prompt
  • In the command window type in notepad and press Enter.
  • The notepad opens. Under File menu select Open.
  • Select "Computer" and find your flash drive letter and close the notepad.
  • In the command window type e:\frst.exe (for x64 bit version type e:\frst64) and press Enter
    Note: Replace letter e with the drive letter of your flash drive.
  • The tool will start to run.
  • When the tool opens click Yes to disclaimer.
  • Press Scan button.
  • It will make a log (FRST.txt) on the flash drive. Please copy and paste it to your reply.
 
Status
Not open for further replies.
Back