Adlice forum

Software feedback => RogueKiller => Topic started by: tienchien1 on March 02, 2018, 02:30:43 pm

Title: "ZeroAccess"????
Post by: tienchien1 on March 02, 2018, 02:30:43 pm

Appears $Recycle.Bin on all partitions. And contains the directory:
S-1-5-18
S-1-5-21-2659015924-729509011-4036444177-1000
S-1-5-21-2847575005-786340621-2455249011-1000


I suspect that the system was infected with ZeroAcces, but not detected when scanned with Rougerkiller. Thanks!!!

Title: Re: "ZeroAccess"????
Post by: Curson on March 02, 2018, 06:05:15 pm

Hi tienchien1,

These directories are the "Recycle Bin" folders for the different users of the system. This is legit.
Zero Access is located in a subfolder with one letter. For exemple :

Quote

C:\$recycle.bin\S-1-5-21-401829751-3458203032-4078260756-1000\$50ccc3ced9981b15c41a4497da2ba7b8\n

Regards.

Title: Re: "ZeroAccess"????
Post by: tienchien1 on March 04, 2018, 06:09:01 pm

Thank u so much.

Title: Re: "ZeroAccess"????
Post by: Curson on March 05, 2018, 03:47:51 pm

Hi tienchien1,

You are very welcome.

Regards.