PLEASE HELP Trojan.Gen.2 and Trojan Zeroaccess [Solved]

heres the fss log thanks for all the help by the way, you've been very comprehensive and helpful, I will make sure to recomend all my friends to this forum =).

thanks for all the help by the way, you've been very comprehensive and helpful, I will make sure to recomend all my friends to this forum

Thanks. Kind of you to say.

• Click Start > Run type Notepad click OK.
• This will open an empty Notepad file.
• Copy/Paste the contents of the box below into Notepad.
  

  @echo off
  regedit.exe /e "%userprofile%\Desktop\look.txt" "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BITS"
  Notepad.exe %userprofile%\Desktop\look.txt
  Del look.txt
  Del %0

• Click Format and ensure Wordwrap is unchecked.
• Save as RegExp.bat
• Save as file type All Files or it won't work.
• Now double click on RegExp.bat to run it.
• A file look.txt will open on your Desktop, please post the contents in your next reply.

your welcome and here is the look.txt Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BITS] "ImagePath"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,\ 74,00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,73,\ 00,76,00,63,00,68,00,6f,00,73,00,74,00,2e,00,65,00,78,00,65,00,20,00,2d,00,\ 6b,00,20,00,6e,00,65,00,74,00,73,00,76,00,63,00,73,00,00,00 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BITS\Parameters] "ServiceDll"=hex(2):25,00,73,00,79,00,73,00,74,00,65,00,6d,00,72,00,6f,00,6f,\ 00,74,00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,\ 71,00,6d,00,67,00,72,00,2e,00,64,00,6c,00,6c,00,00,00

Please download ERUNT (Emergency Recovery Utility NT). This program allows you to keep a complete backup of your registry and restore it when needed. The standard registry backup options that come with Windows back up most of the registry but not all of it. ERUNT however creates a complete backup set, including the Security hive and user related sections. ERUNT is easy to use and since it creates a full backup, there are no options or choices other than to select the location of the backup files. The backup set includes a small executable that will launch the registry restore if needed. **Remember if you are using Windows Vista as your operating system right-click the executable and Run as Administrator.
———-

Please download the file that I have attached to your Desktop.

Once the file is on your Desktop, right-click on it and select Extract all… .

Accept any prompts that there are and then on the BITS.reg file right-click and Merge. Now reboot your system.

Try to run Windows updates and let me know how it works.

Run a new scan with FSS and post the new log.

ok Well I downloaded and merged the Bits file and then rebooted my system, I then downloaded all the important updates with no problems and also downloaded the optional updates. Heres the FSS.txt also for the ERUNT thing, can you give me some instructions on how to download and install it? like where should I install it to and such would be much appreciated. =)

Hi, Looks much better. We just had to replace a service registry key to fix all of that up. As for ERUNT, you can just download that to your Desktop, run the Setup.exe and the rest is self explanatory.

ok great thanks, I will do that and if any further problems occur i'll get in touch with you=)

Since this issue appears to be resolved … this Topic has been closed. Glad we could be of assistance.

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please follow the instructions here http://forums.whatthetech.com/you_Infected_t106388.html
and start a New Topic.