Reply to thread

Message

<blockquote data-quote="Papirus" data-source="post: 93171" data-attributes="member: 4131">OK, these were the steps that I did (all in Windows Normal Mode):1. Run Windows Repair (all 3 steps)....but I forget to close the antivirus, norton ghost and hitman pro services.2. Run FSS and network still not working.&nbsp; Here is the log.&nbsp; [attachment=3013]3. Run Windows Repair again for step 3 (repair) and this time I close the above services to avoid conflicts.4. Run FSS and network still not working.&nbsp; Here is the log. [attachment=3014]5. Run TDSSKiller and here is the log.[attachment=3016] (load module checked)[attachment=3015] (scan log)Then I run the OTL mode again to scan the wbemess.dll and fastprox.dll in www.virustotal.com.&nbsp; None of them show any sign of virus.Then I run McAfee Root Kit Remover in OTL mode.&nbsp; Interestingly, it says that it found zeroaccess rootkit in the CD.&nbsp; Here is the log.[attachment=3017].I upload the shell32.dll from the CD to virustotal.com and it does not find any virus.&nbsp; Is this a false positive error from McAfee Rootkit Remover?&nbsp; Is there a way for someone or McAfee to check the Rootkit Remover tool?Also, I can restore my computer in 20 minutes using the backup data that I have and therefore fix the network problems.&nbsp; However, all other steps that we did will be gone and zeroaccess issue will pop up again (even though I am not sure if this is really an issue or not).&nbsp; Do you have any thought on this?Thanks.</blockquote>

[QUOTE="Papirus, post: 93171, member: 4131"] OK, these were the steps that I did (all in Windows Normal Mode): 1. Run Windows Repair (all 3 steps)....but I forget to close the antivirus, norton ghost and hitman pro services. 2. Run FSS and network still not working. Here is the log. [attachment=3013] 3. Run Windows Repair again for step 3 (repair) and this time I close the above services to avoid conflicts. 4. Run FSS and network still not working. Here is the log. [attachment=3014] 5. Run TDSSKiller and here is the log. [attachment=3016] (load module checked) [attachment=3015] (scan log) Then I run the OTL mode again to scan the wbemess.dll and fastprox.dll in www.virustotal.com. None of them show any sign of virus. Then I run McAfee Root Kit Remover in OTL mode. Interestingly, it says that it found zeroaccess rootkit in the CD. Here is the log. [attachment=3017]. I upload the shell32.dll from the CD to virustotal.com and it does not find any virus. Is this a false positive error from McAfee Rootkit Remover? Is there a way for someone or McAfee to check the Rootkit Remover tool? Also, I can restore my computer in 20 minutes using the backup data that I have and therefore fix the network problems. However, all other steps that we did will be gone and zeroaccess issue will pop up again (even though I am not sure if this is really an issue or not). Do you have any thought on this? Thanks. [/QUOTE]

Verification