[Resolvido] Webroot Zero Access Remover

[DigRam 144]

Saudações!

 

Na remoção do rootkit ZeroAccess ou Max ++,podemos contar com o auxílio do Webroot Zero Access Remover.

|- Baixe: < Webroot ZeroAccess Remover >

|- Salve-o no desktop!

|- Para Windows Vista ou 7,clique direito no arquivo "antizeroaccess.exe" e execute-o como Administrador.

 

 

|- Na solicitação: "Would you like to perform a System Scan?" [Y/N],escolha o "Y".

|- À seguir,aperte Enter -> Aguarde!

 

 

|- Na presença do rootkit,a ferramenta solicitará a desinfecção.

|- Aperte o "Y" -> Enter.

 

 

|- O êxito na desinfecção de arquivos ou drivers,virá com a mensagem: "Cleaned!"

 

///°°°///

 

Webroot AntiZeroAccess 0.8 Log File

Execution time: 03/03/2012 - 17:39

Host operation System: Windows Xp X86 version 5.1.2600 Service Pack 3

17:39:43 - CheckSystem - Begin to check system...

17:39:43 - OpenRootDrive - Opening system root volume and physical drive....

17:39:43 - C Root Drive: Disk number: 0 Start sector: 0x0000003F Partition Size: 0x0A00298D sectors.

17:39:43 - PrevX Main driver extracted in "C:\WINDOWS\system32\drivers\ZeroAccess.sys".

17:39:43 - InstallAndStartDriver - Main driver was installed and now is running.

17:39:43 - CheckSystem - Warning! Disk class driver is INFECTED.

17:39:43 - CheckFile - Warning! File "afd.sys" is Infected by ZeroAccess Rootkit.

17:39:46 - CheckFile - Unable to read "sptd.sys" file. CreateFile last eror: 0x00000020.

17:40:10 - DoRepair - Begin to perform system repair....

17:40:10 - DoRepair - System Disk class driver was repaired.

17:40:10 - DoRepair - Infected "afd.sys" file was renamed.

17:40:10 - DoRepair - Infected "afd.sys" file was successfully cleaned!

17:40:10 - FindAndDestroySelfDefenseDriver can't analyze "sptd.sys". CreateFile last error: 32

17:40:10 - DoRepair - Warning! Unable to delete "desktop.ini" ZeroAccess file, last error: 5. This file will be removed at next reboot.

17:40:18 - StopAndRemoveDriver - AntiZeroAccess Driver is stopped and removed.

17:40:18 - StopAndRemoveDriver - File "ZeroAccess.sys" was deleted!

17:40:18 - Execution Ended!

 

///°°°///

 

|- Relatório,típico,de um log infectado e reparado pela ferramenta.

 

Sem Mais!

DigRam