Help deleting Rootkit.ZeroAccess

[LaLuz]

were you able to view that file?  is that the one that you were looking for?

These are my issues:
 1.   According to ComboFix, my PC is infected with Rootkit.ZeroAccess, but it's not getting rid of it. 

 2.   I cannot download Malwarebytes.  I get that CoCreateInstance error that I've mentioned on my first post.

I just found this other log, I'm not sure if it tell you anything.

[essexboy]

OK lets try one more tool, this does have a reasonable success rate on zero access stubborn files..  Although it is not what it is designed for

 Download the latest version of TDSSKiller from here and save it to your Desktop.
 
 

• Doubleclick on TDSSKiller.exe to run the application
  
  
  
• Then click on Change parameters.
   
  
   
  
• Check the boxes beside Verify Driver Digital Signature and Detect TDLFS file system, then click OK.
   
  
• Click the Start Scan button.
   
   
  
• If a suspicious object is detected, the default action will be Skip, click on Continue.
   
  
   
  
• If malicious objects are found, they will show in the Scan results and offer three (3) options.
• Ensure Cure is selected, then click Continue => Reboot now to finish the cleaning process.
  
  
• Get the report by selecting Reports

 

• Note: If Cure is not available, please choose Skip instead, do not choose Delete unless instructed.
  

Please copy and paste its contents on your next reply.

[LaLuz]

Here is the TDSSKiller report

[essexboy]

TDSSKiller saw no sign


• Download RogueKiller  and save it on your desktop.
   
  NOTE: If using IE8 or better Smartscreen Filter will need to be disabled
  
  
• Quit all programs
• Start RogueKiller.exe.
  
• Wait until Prescan has finished ... 
•     Click on Scan

   

• Wait for the end of the scan. 
• The report has been created on the desktop.

[LaLuz]

Here is the RK report

[essexboy]

OK no sign there of any malware that I can see

Download and run MBAM clean.exe from here http://downloads.malwarebytes.org/file/mbam_clean
Then retry to install MBAM
Then re-Run combofix and allow it to update

[LaLuz]

Hi Essexboy, Happy New Year.

I'm sorry for the delay, but I've been out of town for about one week.

I got the same error message when downloading MBam, and ComboFix did the same thing again.  Here is the report.

[essexboy]

OK could you download the following programme to a USB drive
 

Farbar Recovery Scan Tool

Then start the computer and press F8 to get to the safe mode menu
Select recovery console
Select Command prompt

At the command prompt type the following  :

notepad and press Enter.
The notepad opens. Under File menu select Open.
Select "Computer" and find your flash drive letter and close the notepad.
In the command window type e:\FRST.exe and press Enter
Note: Replace letter e with the drive letter of your flash drive.

• The tool will start to run.

• When the tool opens click Yes to disclaimer.
• Press Scan button.
  
• It will make a log (FRST.txt) on the flash drive. Please copy and paste it to your reply.

[LaLuz]

Recovery Console is not working.  It gets stuck on the screen that says 'opening recovery console'

[essexboy]

More than one way to skin a cat

Please print these instruction out so that you know what you are doing

• Download OTLPENet.exe to your desktop
  
• Download Farbar Recovery Scan Tool and save it to a flash drive.
  
• Ensure that you have a blank CD in the drive
• Double click OTLPENet.exe and this will then open imgburn  to burn the file to CD
  
• Reboot your system using the boot CD you just created.

Note : If you do not know how to set your computer to boot from CD follow the steps here

• As the CD needs to detect your hardware and load the operating system, I would recommend a nice cup of tea whilst it loads 
• Your system should now display a Reatogo desktop.

Note : as you are running from CD it is not exactly speedy

• Insert the flash drive with FRST on it
• Locate the flash drive and run FSRT
• The tool will start to run.

• When the tool opens click Yes to disclaimer.
• Press Scan button.
  
• It will make a log (FRST.txt) on the flash drive. Please copy and paste it to your reply.

[LaLuz]

My CD Drive is not working.  It is nothing new, it hasn't work for a while.

I'm not sure if you have already read this, but I went ahead and fixed the CD drive.  Let me go ahead and follow your instructions now.  Thank you             

[essexboy]

OK ..  I could have given USB instructions if needed

[LaLuz]

please go ahead and give me the instructions for usb as I don't have a blank CD 

[essexboy]

Download Peazip to the desktop 
Run and install the programme
As it installs this page will show, deselect the AVG ticks
Press decline and it will then install cleanly 
 

 
Download the following files to the desktop .. Right click the links and select save as...then select desktop 
 
Iso2disc
 
OTLPE_standard
 
Right click OTLPE on your desktop and select  ..Open as archive 
 

 
 
Select OTLPE standard 
 

 
Click Extract, ensure that desktop is selected 
 

 
Insert the USB stick Then run ISO2disc 
 

 
Select the ISO file on the desktop, select Burn to USB Flash Drive .
Press Start Burn

You now have an XP type desktop on USB
Copy FRST to the same usb
Boot using the USB
Then when at the reatogo desktop
Locate FRST and run

[LaLuz]

I found a CD, proceeded with the CD instructions and encountered the following error:
       E 13:55:23 Operation Failed! - Duration: 00:02:02
the pop up window read:
  I/O error
  SCSIStatus: 0x02
  interpretation:  Check condition
  CDB ZA......(some long number)
  write (10)  sectors 88640-88671
  sense area 70...(some long number)
  interpretation:  Command Sequence Error

the disk shows 702 MB of free space.