Author Topic: "ZeroAccess"????  (Read 2899 times)

0 Members and 1 Guest are viewing this topic.

March 02, 2018, 02:30:43 pm

tienchien1

  • Newbie

  • Offline
  • *

  • 8
  • Reputation:
    0
    • View Profile
"ZeroAccess"????
« on: March 02, 2018, 02:30:43 pm »
Appears $Recycle.Bin on all partitions. And contains the directory:
S-1-5-18
S-1-5-21-2659015924-729509011-4036444177-1000
S-1-5-21-2847575005-786340621-2455249011-1000


I suspect that the system was infected with ZeroAcces, but not detected when scanned with Rougerkiller. Thanks!!!

Reply #1March 02, 2018, 06:05:15 pm

Curson

  • Global Moderator
  • Hero Member

  • Offline
  • *****

  • 2435
  • Reputation:
    84
    • View Profile
Re: "ZeroAccess"????
« Reply #1 on: March 02, 2018, 06:05:15 pm »
Hi tienchien1,

These directories are the "Recycle Bin" folders for the different users of the system. This is legit.
Zero Access is located in a subfolder with one letter. For exemple :
Quote
C:\$recycle.bin\S-1-5-21-401829751-3458203032-4078260756-1000\$50ccc3ced9981b15c41a4497da2ba7b8\n

Regards.

Reply #2March 04, 2018, 06:09:01 pm

tienchien1

  • Newbie

  • Offline
  • *

  • 8
  • Reputation:
    0
    • View Profile
Re: "ZeroAccess"????
« Reply #2 on: March 04, 2018, 06:09:01 pm »
Thank u so much.

Reply #3March 05, 2018, 03:47:51 pm

Curson

  • Global Moderator
  • Hero Member

  • Offline
  • *****

  • 2435
  • Reputation:
    84
    • View Profile
Re: "ZeroAccess"????
« Reply #3 on: March 05, 2018, 03:47:51 pm »
Hi tienchien1,

You are very welcome.

Regards.