Guys,
I was looking at a thread in the screenshots and videos forum.
("Time to brag....new pc")
It had a ton of pictures attached, and while I was waiting for them to load
I started getting all these fake microsoft virus pop-ups. I immediately shut
down my computer. When I re-booted, they started popping up again. I closed them
and ran a virus scan which found several items, but while scanning, my virus
scanner shut down and the icon disappeared from the task bar. I ran the exe from
its folder location but it would not work. All attempts to run any kind of
antivirus was futile.
Finally, in safe-mode, I was able to restore to an earlier time. My scanner was
back. I changed a setting to scan at bootup, and changed some settings in my
Internet Explorer and re-booted. It scanned at bootup and gave two alerts:
12/22/2011 12:57:08 PM Startup scanner file Operating memory » \GLOBAL??\94a9f00c\WINDOWS\$NtUninstallKB25765$\2494165004\Desktop.ini a variant of Win32/Sirefef.DN trojan cleaned by deleting ERIC\Owner
12/22/2011 12:57:11 PM Startup scanner file Operating memory » svchost.exe(892) a variant of Win32/Sirefef.DT trojan unable to clean ERIC\Owner
It does not clean it or quarantine it. Just logs it. Now, whether I'm on the
internet, or just my desktop, my antivirus keeps giving me these warnings:


Not sure, but I think me and WC are using the same antivirus.....it did not stop
this...
I ended up running a program I got a long time ago, called ComboFix.
When I ran it, it ended up saying that I was infected with the RootkitZeroAccess!
virus. Said it was particularly nasty and that this would take more time. (LOL!)
It kept running....then said it detected Rootkit activity and would re-boot.
After re-booting, it went thru it's complete process....said another Wndows file
was infected....fixed it......re-booted...then left me a log of what it had done.
Now my computer is (fingers crossed) working fine.
(I think WC pointed me to this freeware fixer a long time ago.
Yo WC! It DID zap my MindLogin thou. Treated it like a virus!)
I hope this may help someone!
Thanks,
AO