[noiserider]

It's still the black screen with the blinking cursor.

[Advertisements]

Hi noise,

Let me review our newest logs and I'll get back to you after my fix has been reviewed.

[Salagubang]

Hi noise,

Let me review our newest logs and I'll get back to you after my fix has been reviewed.

[noiserider]

Salagubang,

I'm not a computer expert and had problems interpreting all the reports.

Did any of these programs find a virus? Might I have a hardware problem?

Keith

[Salagubang]

Did any of these programs find a virus? Might I have a hardware problem?

There seems to be a corruption in the boot section but I can't say yet if it was caused by malware since the scans didn't find anything on those parts.

It'd be interesting to discover what had caused it. Mind telling what kind of file did you downloaded from rapidshare.

Hang in there.

[noiserider]

I'm not sure what type of file it was since Avast stopped the execution. The file was sent to me by a friend's hijacked email. After Avast told me it was a virus I was thinking of downloading the file and sending it to Kaspersky's online scanner, but I didn't want to chance breaking my only working computer. Here is the link if you want to send it to Kaspersky.

[deleted]

Here is another file sent in the same email which I didn't download.


[deleted]


Keith

Edited by noiserider, 08 December 2010 - 07:39 PM.

[Salagubang]

You may remove the links now as we don't want others accidentally clicking it.

[Salagubang]

Hi noiserider,

I need you to check if the Acer Recovery functioning properly.

Restart your computer and once the ACER logo appears, simultaneously press ALT + F10 (or F10) to start the restore utility. Do not proceed with the recovery, just confirm if it fires up the application and working properly.

Edited by Salagubang, 08 December 2010 - 08:04 PM.

[noiserider]

Nothing happens when I press F10 or Alt F10. (I have a recovery disk which I could use for the recovery process)

I did get a response when pressing the Insert key. It took me to a Setup Program.

[Salagubang]

Hi noiserider,

Insert the recovery disk into your computer. Do a search and see if you can find any of these files:

mbrwrwin.exe
rtmbr.bin
mbrwrdos.exe

[noiserider]

Those files are not on my recovery disk. The recovery disk has mostly image files.

[Salagubang]

Hi noiserider,

Thank you. That is all the information I need for now.

[noiserider]

If I use 7zip on the ISO file I can see

mbrwrwin.exe
rtmbr.bin

[Salagubang]

If I use 7zip on the ISO file I can see

mbrwrwin.exe
rtmbr.bin

Good.

I need to write a detailed instruction for you to follow but may not be able to post until tomorrow as they need to be reviewed by an expert. Please be patient.

[noiserider]

Thanks for the help. Take your time with the instructions. I'm headed off to sleep.

[Salagubang]

Hi noiserider,

Step One

Boot using your USB stick.

• Copy the file C:\boot.ini to the USB stick then restart the computer.
• from the Boot Menu select recovery console, do NOT select the option that states: Press F2 to initiate the Automated System Recovery (ASR) tool.
• You’re going to proceed until you see the following screen, at which point you will press the “R” key to enter the recovery console:
  
  
  
• After you have selected the appropriate option from step two, you will be prompted to select a valid Windows installation (typically number “1?).
• Select the installation number, and hit Enter.
• If there is an administrator password for the administrator account, enter it and hit Enter (if asked for the password, and you don't know it, you're out of luck).
• You will be greeted with this screen, which indicates a recovery console at the ready:
  
  
  
• Type the command below:
  
  fixmbr
  
• Wait till it finishes then restart the computer into normal mode without the USB stick.
• If the computer booted successfully, proceed with the succeeding instructions.

[/list]
Step Two

Malwarebytes' Anti-Malware
Please download Malwarebytes' Anti-Malware from Here or Here

Double Click mbam-setup.exe to install the application.

• Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
• If an update is found, it will download and install the latest version.
• Once the program has loaded, select "Perform Quick Scan", then click Scan.
• The scan may take some time to finish,so please be patient.
• When the scan is complete, click OK, then Show Results to view the results.
• Make sure that everything is checked, and click Remove Selected.
• When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.(See Extra Note)
• The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
• Copy&Paste the entire report in your next reply.

If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts,click OK to either and let MBAM proceed with the disinfection process,if asked to restart the computer,please do so immediatly.


Step Three

Save these instructions so you can have access to them while in Safe Mode.

Please click here to download AVP Tool by Kaspersky.

• Save it to your desktop.
• Reboot your computer into SafeMode.
  

  You can do this by restarting your computer and continually tapping the F8 key until a menu appears.
  Use your up arrow key to highlight SafeMode then hit enter.

• Double click the setup file to run it.
• Click Next to continue.
• Accept the Licence agreement and click on next
• It will by default install it to your desktop folder.Click Next.
• It will then open a box There will be a tab that says Automatic scan.
• Under Automatic scan make sure these are checked.

• Hidden Startup Objects
• System Memory
• Disk Boot Sectors.
• My Computer.
• Also any other drives (Removable that you may have)

Leave the rest of the settings as they appear as default.

• Then click on Scan at the to right hand Corner.
• It will automatically Neutralize any objects found.
• If some objects are left un-neutralized then click the button that says Neutralize all
• If it says it cannot be Neutralized then chooose The delete option when prompted.
• After that is done click on the reports button at the bottom and save it to file name it Kas.
• Save it somewhere convenient like your desktop and just post only the detected Virus\malware in the report it will be at the very top under Detected post those results in your next reply.
  
  

  Note: This tool will self uninstall when you close it so please save the log before closing it.