"ZeroAccess"????

[tienchien1]

Appears $Recycle.Bin on all partitions. And contains the directory:
S-1-5-18
S-1-5-21-2659015924-729509011-4036444177-1000
S-1-5-21-2847575005-786340621-2455249011-1000


I suspect that the system was infected with ZeroAcces, but not detected when scanned with Rougerkiller. Thanks!!!

[Curson]

Hi tienchien1,

These directories are the "Recycle Bin" folders for the different users of the system. This is legit.
Zero Access is located in a subfolder with one letter. For exemple :

C:\$recycle.bin\S-1-5-21-401829751-3458203032-4078260756-1000\$50ccc3ced9981b15c41a4497da2ba7b8\n

Regards.

[tienchien1]

Thank u so much.

[Curson]

Hi tienchien1,

You are very welcome.

Regards.