Portal
Saudações!
|- Salve-o no desktop!
|- Para Windows Vista ou 7,clique direito no arquivo "antizeroaccess.exe" e execute-o como Administrador.
|- Na solicitação: "Would you like to perform a System Scan?" [Y/N],escolha o "Y".
|- À seguir,aperte Enter -> Aguarde!
|- Na presença do rootkit,a ferramenta solicitará a desinfecção.
|- Aperte o "Y" -> Enter.
|- O êxito na desinfecção de arquivos ou drivers,virá com a mensagem: "Cleaned!"
-/-
Webroot AntiZeroAccess 0.8 Log File
Execution time: 03/03/2012 - 17:39
Host operation System: Windows Xp X86 version 5.1.2600 Service Pack 3
17:39:43 - CheckSystem - Begin to check system...
17:39:43 - OpenRootDrive - Opening system root volume and physical drive....
17:39:43 - C Root Drive: Disk number: 0 Start sector: 0x0000003F Partition Size: 0x0A00298D sectors.
17:39:43 - PrevX Main driver extracted in "C:\WINDOWS\system32\drivers\ZeroAccess.sys".
17:39:43 - InstallAndStartDriver - Main driver was installed and now is running.
17:39:43 - CheckSystem - Warning! Disk class driver is INFECTED.
17:39:43 - CheckFile - Warning! File "afd.sys" is Infected by ZeroAccess Rootkit.
17:39:46 - CheckFile - Unable to read "sptd.sys" file. CreateFile last eror: 0x00000020.
17:40:10 - DoRepair - Begin to perform system repair....
17:40:10 - DoRepair - System Disk class driver was repaired.
17:40:10 - DoRepair - Infected "afd.sys" file was renamed.
17:40:10 - DoRepair - Infected "afd.sys" file was successfully cleaned!
17:40:10 - FindAndDestroySelfDefenseDriver can't analyze "sptd.sys". CreateFile last error: 32
17:40:10 - DoRepair - Warning! Unable to delete "desktop.ini" ZeroAccess file, last error: 5. This file will be removed at next reboot.
17:40:18 - StopAndRemoveDriver - AntiZeroAccess Driver is stopped and removed.
17:40:18 - StopAndRemoveDriver - File "ZeroAccess.sys" was deleted!
17:40:18 - Execution Ended!
|- Relatório,típico,de um log infectado e reparado pela ferramenta.
A+
|- Baixe: < Webroot ZeroAccess Remover >Ferramenta desenvolvida pela Webroot,e que nos auxiliará na remoção do trojan zeroaccess. ( Somente 32bits )
|- Salve-o no desktop!
|- Para Windows Vista ou 7,clique direito no arquivo "antizeroaccess.exe" e execute-o como Administrador.
|- Na solicitação: "Would you like to perform a System Scan?" [Y/N],escolha o "Y".
|- À seguir,aperte Enter -> Aguarde!
|- Na presença do rootkit,a ferramenta solicitará a desinfecção.
|- Aperte o "Y" -> Enter.
|- O êxito na desinfecção de arquivos ou drivers,virá com a mensagem: "Cleaned!"
-/-
Webroot AntiZeroAccess 0.8 Log File
Execution time: 03/03/2012 - 17:39
Host operation System: Windows Xp X86 version 5.1.2600 Service Pack 3
17:39:43 - CheckSystem - Begin to check system...
17:39:43 - OpenRootDrive - Opening system root volume and physical drive....
17:39:43 - C Root Drive: Disk number: 0 Start sector: 0x0000003F Partition Size: 0x0A00298D sectors.
17:39:43 - PrevX Main driver extracted in "C:\WINDOWS\system32\drivers\ZeroAccess.sys".
17:39:43 - InstallAndStartDriver - Main driver was installed and now is running.
17:39:43 - CheckSystem - Warning! Disk class driver is INFECTED.
17:39:43 - CheckFile - Warning! File "afd.sys" is Infected by ZeroAccess Rootkit.
17:39:46 - CheckFile - Unable to read "sptd.sys" file. CreateFile last eror: 0x00000020.
17:40:10 - DoRepair - Begin to perform system repair....
17:40:10 - DoRepair - System Disk class driver was repaired.
17:40:10 - DoRepair - Infected "afd.sys" file was renamed.
17:40:10 - DoRepair - Infected "afd.sys" file was successfully cleaned!
17:40:10 - FindAndDestroySelfDefenseDriver can't analyze "sptd.sys". CreateFile last error: 32
17:40:10 - DoRepair - Warning! Unable to delete "desktop.ini" ZeroAccess file, last error: 5. This file will be removed at next reboot.
17:40:18 - StopAndRemoveDriver - AntiZeroAccess Driver is stopped and removed.
17:40:18 - StopAndRemoveDriver - File "ZeroAccess.sys" was deleted!
17:40:18 - Execution Ended!
|- Relatório,típico,de um log infectado e reparado pela ferramenta.
A+
» KpRm ( ... by Kernel-panik )
» ESET Rogue Applications Remover ( ... by Eset.com )
» PW Clean 2.7 ( ... by Doutor PW )
» CKScanner ( ... by askey127 )
» AdwCleaner ( ... by XPlode )
» ZHPDiag ( ... de Nicolas Coolman )
» Argente - Registry Cleaner ( ... by Argente Software )
» ListChkdskResult ( ... by SleepyDude )