my logs

Please goto the below link and follow the instructions for running TDSSKiller from Kaspersky

• TDSSkiller - How to run

Be sure to attach your log from TDSSKiller


Also download MBRCheck to your desktop.

See the download links under this icon http://forums.majorgeeks.com/chaslang/images/MGDownloadLoc.gif

• Double click MBRCheck.exe to run (vista and Win 7 right click and select Run as Administrator)
• It will show a Black screen with some information that will contain either the below line if no problem is found:
  • Done! Press ENTER to exit...
• Or you will see more information like below if a problem is found:
  • Found non-standard or infected MBR.
  • Enter 'Y' and hit ENTER for more options, or 'N' to exit:
• Either way, just choose to exit the program at this point since we want to see only the scan results to begin with.
• MBRCheck will create a log named similar to MBRCheck_07.16.10_00.32.33.txt which is random based on date and time.
• Attach this log to your next message. (See: HOW TO: Attach Items To Your Post )

 

MBRcheck is showing that you have an MBR infection. Do you have your Windows XP Home Edition boot CD so that we can use it to boot to the Recovery Console to repair your MBR?

 

There appears to be a factory recovery partition which you could restore to but this puts the PC back to the state it was in when it came out of the box. If you do this, you lose everything on it. Thus if you were going to do this, you will have to make backups of all important data first. In fact it is a good idea to do the backups anyway before repairing the MBR just to be safe.

Not likley. Upgrade discs are typically not bootable disks.


You could try booting to the Recovery Console that you installed while installing ComboFix. Once you get to the command prompt of the Recovery Console, you will have to run the below command:

fixmbr

Then you type exit to reboot. This may or may not fix the MBR. Typically the infections block this from working because you are actually still boot the hard disk to get to the Recovery Console. This is why we ask about the CD. Booting from the CD, does not allow the infected MBR to load.

If running fixmbr fromr the installed Recovery Console does not work, then you will have either get a bootable CD, or you will have to make a Windows Recovery Console Boot CD which can be downloaded from some sites online. We will do this if you cannot get the installed one to work properly.

 

You're welcome. Make sure you check out the below now:

How to Protect yourself from malware!