Jump to content


Photo

Zeroaccess rootkit not found by SAS

rootkit

  • Please log in to reply
3 replies to this topic

#1 jwm4

jwm4

    Newbie

  • Members
  • Pip
  • 2 posts

Posted 27 July 2012 - 10:44 PM

SAS did not identify the Zeroaccess rootkit that has infected one of my computers, however, neither did other highly regarded malware detection scanners (MBAM, Kapersky, Housecall, and others). Nevertheless, from the behavior of my machine, I knew it was compromised (constant right click menu popups from every application running and failure of Windows Task Switcher (ALT Tab). Only Comodo detected the rootkit, which SysInternals Rootkit Revealer confirmed.

I'm still trying to remove it with the assistance of Bleeping Computer support, but they are insufferably slow. If anyone has suggestions, I'd appreciate them.

Also, I'm wondering how much I can rely on SAS for rootkit protection?

#2 GuiltySpark

GuiltySpark

    Advanced Member

  • Moderators
  • 433 posts
  • LocationThe Space Between Two Points

Posted 28 July 2012 - 01:59 PM

My advice would be to stick with Bleeping Computer they really do know their stuff, and be sure to follow their instructions to the letter as you will probably have/be asked to use ComboFix, a tool not for the faint hearted.

Using No Way - As Way, Having No Limitation - As Limitation.


http://techstep123.co.uk/

 

http://tgigeeks.boards.net/


#3 jwm4

jwm4

    Newbie

  • Members
  • Pip
  • 2 posts

Posted 31 July 2012 - 04:25 PM

Thanks for your input. Bleeping Computer did resolve the issue, although ComboFix was not an option for my machine (doesn't work with Windows Server 2003).

#4 GuiltySpark

GuiltySpark

    Advanced Member

  • Moderators
  • 433 posts
  • LocationThe Space Between Two Points

Posted 31 July 2012 - 04:28 PM

Glad you're back up and running :)

BC are very good with stubborn Malware, well worth their time.

Using No Way - As Way, Having No Limitation - As Limitation.


http://techstep123.co.uk/

 

http://tgigeeks.boards.net/






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users