Help me get rid of ytasfw rootkit

Problem:
Continous hard drive access even when pc is idle.
C: disk space goes down about 10MB every 30 seconds until reach 0MB.
Very slow performance, takes 3 minutes just to open FireFox.
Whenever login to any site, FireFox freezes for about 5 seconds.

MBAM, Symantic, SpyBot, HijackThis all come up clean.

GMER found the hidden service ytasfw followed by several random characters.
When I clck to delete the process and the confirmation popped up, I clicked No by accident.
The ytaswf entry vanished and GMER can't find instances of ytaswf on subsequent scans.
Did it get added to ignore list?

So far I read that the latest Root Repeal released 08-14-2009 can remove the rootkit but I can't run the program, it just eats up all my memory without starting and I renamed it same thing. I read that somebody on this forum also had the ytaswf rootkit about 20 days ago but still can't get it removed as of now.

Are there any other tool available that can remove this rootkit?

Download Sophos ARK to your Desktop from here:
http://www.sophos.com/products/free-tools/...ti-rootkit.html

Sophos does not update itself, so be sure to download the latest version from their website.

Double-click on the icon and the wizard will guide you through the installation

It is recommended that you close down all non-essential programs

Depending on the individual computer the scan can take anywhere from 5 minutes to over an hour

Start the scan by clicking Start>Programs>Sophos>Sophos Anti Rootkit>Sophos Anti Rootkit

Select the checkboxes for the areas you wish to scan
Select the Extensive scanoption

Click Start scan or hit Enter

The names of suspicious files are displayed in the results list in the upper panel

The results list may also display registry keys or values. these items should not be marked for removal

If you have any question on a file not automatically marked, go to the Sophos website: www.sophos.com
Type in the name ofthe file in the searchbox at the top of the homepage and click Search

Click Clean up checked itemsand when the dialog box appears, click yes
When the dialog box reappears, reboot the computer

A second scan is recommended

To remove Sophos ARK from your computer, go to [b]Start>Programs>Sophos>Sophos Anti Rootkit>Uninstall Sophos Anti Rootkit

Edited by garmanma, 23 August 2009 - 09:27 PM.