Inactive System infected: ZeroAccess Rootkit Activity 4 and TidServ Activity 2

Ahhh! Huuuuuge sigh of relief!!!

Now, let me ask you something. Aside from those "Reinstallation System" sent to me by HP, when I purchased the infected computer (Circuit City), I left the PC there and additional day or two so that they'd install some additional software I bought too. When I went back to pick it up, they'd also provided me with two "Recovery DVDs". Now, I can tell you these DVDs are not original, they're copies. Would these 2 work? I can't see what's in them though since the clean computer has Windows XP in it and not Vista, like the infected PC.
 
Wait a minute... Can I create Vista Recovery DVD on a computer using Windows XP? This maybe another one of my dumb questions... Sorry.
 
Broni, I haven't created the vista recovery disk yet because I first need to know if it's possible to create it from a Windows XP computer (that's the only clean computer I have at this time). If that's the case, I suppose I'll have to use option 2: download it from the link (mediafire), right?

On reading the previous instructions, I see that the very final step is "Attempt to boot normally". In my case, should I boot in safe mode as I'd been doing previously, or should I attempt normal mode this time?

All right, I have to get going now but I'll be back in about 3 hours, at around 7pm (PST). It'd be great if you'd be available then so that we could keep troubleshooting the infected PC some more. Otherwise, I'll be back tomorrow morning.

Thanks so much for all your help.
 
You can create that DVD on any computer.

Yes, attempt to boot normally not to safe mode.

I should be here around 7pm (PST).

I won't be here tomorrow morning. Only in the afternoon.
 
I'm back... Got out late from work. OK... I'll turn the 2 computers on and start working on creating that DVD. It's great to hear you'll be around tonight!
(message sent from my phone)
 
Could I burn it to either a CD or DVD? or only DVD? I think it's small enough to fit in a cd... but gotta check with the expert...
 
Broni, I'm going crazy here! I think the clean computer is infected now! When I opened a new tab, the new tab opened fine but also a new window popped up out of out of nowhere!!!
 
oh... i'm having issues with these supposedly blank cd's... and can't find an unused dvd... I'll keep trying to get this to work... It has to work... ugh!
 
Broni, this is beyond me and my knowledge. I finally found a new and clean dvd that would do the job. I'd be burning this file using nero express essentials, which I've never ever used, and I'm having issues here. It seems it's preset to burn to cd's and not dvd's and so it tells me I need to put the right kind of disk. Do you know how to configure or use this nero?
 
I'd be burning this file using nero express essentials,
This is not what my instructions say.
I asked you to print them out and follow to the dot.
Re-read and follow them.
 
I feel embarrassed now... I'm so sorry Broni... maybe it's because I don't want to sound so ignorant and for that reason I just thought I'd be burning it like a music cd. I thought I needed to go to that link after burning the cd/dvd...

I'll go ahead now and I'm going to follow the link to burn the iso images with imgburn. At the bottom of that page with the link, it says:

Child Pages (5)
Hide Child Pages | Reorder Pages
Page: Burning ISO Images with Active ISO Burner
Page: Burning ISO Images with Alcohol 120
Page: Burning ISO Images with CDBurnerXP
Page: Burning ISO Images with ImgBurn
Page: Burning ISO Images with MagicISO

and the last 5 lines are all links. Should I follow a link there as well?
 
Hi Broni,

I couldn't work on the PC much more since I think the CD/DVD device is not working properly. I was able to download and install the burner but then got stuck because the "disk/recorder" icon that at some point should be lit up on the window of imgburn just wasn't. I'm taking the clean PC to some place to have the CD/DVD device switched for another working one that I have extra sitting at home. I'll be back in about 3 or 4 hrs ( I have to go to work too for a short meeting).

Also, the Vista recovery (ISO image) that I downloaded previously is for vista 32 or 64? Mine is 32.

I'll be back between 5:30 and 6pm (PST). Talk to you then. Hopefully, at that time you'll still be available to help me.

Thanks.
 
Hi Broni,

My meeting today lasted a bit longer than expected and by the time I got to the computer store to have my cd/dvd device checked and/or switched, they were already closing and couldn't help me.

About two hours ago I decided to go get a cd/dvd drive cleaner from Staples as I suspected that could be the problem. But it sure is not as the drive can't read/recognize the disk is in there. Oh, well.

Tomorrow (Friday) morning I won't be available but I'll be back home at around 1pm or so with the fixed/switched cd/dvd drive. Then I'll be available to keep working on this virus removal process for a couple of hours or so. I'll be coming back home at around 5 or 6pm willing to work some more on this and my plans would be to continue working on this pc issue as much as I can all throughout the weekend as well (if needed) because next week I'll be very busy with work and I'm really not sure I will have much time left to do this.

What's your availability on here for the next few days if I may ask, Broni? Just to be in sync.
 
Hi Broni,

Late this afternoon I had an appt. with the eye doctor and I had my pupils dilated and now I can't read/write much because I see all blurry. The dr. said my vision will go back to normal in a few hours and not to strain my eyes now. And I must admit,I find it very difficult to type this at this time. I'll wait and see if in about 30 more minutes or so I'm doing better.

Just in case by the time I recover you're not around here anymore, will you be available on here at all tomorrow?

Thanks.
 
Hi Broni,

I'm finally back. I meant to come back earlier but I got up late and then I've had a lot of trouble with this clean computer. It's old and the dvd drive is not working properly. Also the disks I've been trying to use were already formatted by the dvd recorder Ithat is plugged in with the tv and I came to the conclusion that's the reason why I can't use them here. I'd need to reformat them and I don't know how to go about that. At any rate, I got an external dvd drive that hope it works. I got a pack of dvd+rw disks too. I just tried to burn one of the new disks following the directions you gave me but this disk needs formatting. I know this is going to sound extremely dumb but these are the options I have for this disk: 1) create audio cd, 2) create data disk, 3) create slide show, and 4) backup. I can only imagine that I need to choose "create data disk", right? Thanks.
 
Back