After the very hard day
(reading tons of posts, trying a lot of things, reading Polish forum ... do u believe it?
if not - ask google translator
) i reach the solution (may be)
. This backdoor.win32.zaccess has a lot of modifications and all of them is easy to destroy, but now he has ".oun" mod and is more difficult... for now.
I just start with command prompt "sfc /scannow" with KIS2012 started(preventing virus to create new files). After sfc complete the task need restart.
After restart the PC (WIN 7 64bit ultimate), KIS stop detecting "desktop.ini" and ".@" files.
I download "fresh" Combofix on my desktop and rename it (just in case) on "scvhost.com.exe" before saving it. After closing all my open windows, browsers and stopping KIS, i start it. It clean the other junk things and restart my PC(ComboFix.txt isnt saved .. i don't know why
). Now I wait backdoor.win32.zaccess.oun to return for me .. may be not
P.S. sorry about my bad English.
I do not believe the solution is sо easy.
Edited by oldbone, 23 May 2012 - 03:25 PM.