Black Internet Virus Strikes again?

Welcome to Major Geeks!

The log is still on your PC. Attach the below

Code:

"C:\Documents and Settings\Greg\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\Logs\"
Jul 10 2010        7482  "SUPERAntiSpyware Scan Log - 07-10-2010 - 21-54-18.log"

You need to disable Daemon Tools as requested in step 6 of the READ & RUN ME and you need to do this now before continuing.


If you have the Black Internet infection, it is in your Master Boot Record (MBR). We need to see the below log before creating a fix.

• Download bootkit_remover.rar
• Click the underlined DOWNLOAD text to download the file and save it to your Desktop.
• You then need to extract the remover.exe file from the RAR using a program capable of extracing RAR compressed files. If you don't have an extraction program, you can use 7-Zip
• After extracing remover.exe to your Desktop, double click the remover.exe file to run the program.
• Attach or post inline here, the output from remover.exe

NOTE: The Command Prompt window text can be copied to the clip board by right clicking on the top bar of the window and using the Edit commands to Mark, Copy, and Paste.

 

Yes the log is there which is why I was able to show you where it was. That is straight out of the logs you attached. You need to attach the file I showed not one that you are creating. I don't need a new scan/log. SUPERAntiSpyware automatically saves the logs with file names like I showed you and in their own folder. It does not name them like the files you are attaching.


Do you have all important data backed up? You really should do this before continuing since we will need to rewrite your MBR to fix this and while most times this can be done without any problem, these infections can react badly and that could result in a PC not being bootable. Again you really don't have much choice though since these infections are too dangerous to your security to leave on a PC.


Also since you have a Dell PC which uses a non-standard MBR, fixing the mbr may prevent access the the Dell Restore Utility, which allows you to press a key on startup and revert your computer to a factory delivered state. There are a couple of known fixes for said condition, though the methods are somewhat advanced. If you are unwilling to take such a risk, you should not continue but you risk serious problems leaving this infection in place and thus your only other option would be to try using the Dell Restore Utility to return a factory ship state which will remove everything you additional you have put onto the PC.




Now if you have important data backup up and understand the above warning - please do the following:

• Click Start, Run then copy and paste the below into the Run box and click OK.

"%userprofile%\Desktop\remover.exe" fix \\.\PhysicalDrive0

• Now reboot your PC and after reboot continue with the below instructions.
• Disable System Restore on all drives.
• Look for the below folder and if if it sill exists, delete it.
  • C:\System Volume Information\Microsoft
• Now run the C:\MGtools\GetLogs.bat file by double clicking on it (Note: if using Vista or Win7, don't double click, use right click and select Run As Administrator).
  
  
  Then attach the below logs:
  • C:\MGlogs.zip

Make sure you tell me how things are working now!