I got done being assisted in cleaning my desktop computer last week. Now I am hoping to tackle the 'root' (sorry, couldn't let it go) of the problem: My wife's notebook seems to be the cause of my desktop's infection with the ZeroAccess rootkit. The desktop is now clean and running normally (with Avast currently standing guard). The real problem is that the notebook, while having the same basic user experience symptoms, is not running any security software. Windows Defender, and also Windows Update, have been disabled, and even after restarting, appear to be disabled after a restart. After posting in "Am I infected?..." , I was instructed to run dds and post the logs here. Well, in addition to having new symptoms, including a one-time failure of the security options screen (the screen invoked in Windows by using Ctl+Alt+Del), and now the disappearance of my desktop wallpaper, dds failed to run from the desktop (one time only).
While the machine is not currently connected to the internet (there is a firmware switch that turns off the NIC), the problem appears to get more serious every time the machine is restarted.
The general user experience symptoms are: very slow responsiveness of the GUI and all user requests; continuous hard disk use even in the absence of high CPU usage; extremely long response times to requests for system service and component tools, such as Windows Update, Windows Defender, and Control Panel.
- The desktop background is now black.
- All desktop icons have been auto-sorted (not by me).
- One time only, after not responding to various security-related tasks, I tried to invoke the Security Options screen and got the following Critical Failure dialog:
"Failure to display security and shut down options
The logon process was unable to display security and logon options when CTRL+ALT+ DELETE was pressed. If the operating system does not respond, press ESC or restart the computer by using the power switch."
I did a hard power-off and reboot.
- One time only, dds failed to run from the desktop. The following text error message displayed:
BOOTMGR is missing
press Ctl+Alt+Del to restart
As of this posting, I am waiting for dds to complete (close to an hour now). If it completes successfully, I will post the logs. If dds does not complete, or continues to run without any apparent progress, I will terminate it at at least restart Windows Defender. Right now all I can do is hope that there is still hope.