Hi,
Sorry I didn't notice you had edited your last post, I don't get notified of them.
You have a nasty new type of infection that has installed a hidden partition to your system which we will remove. You'll have to make a boot disk on a clean PC. It's quite complicated so read it thoroughly a few times before you do it.
Preferably from a clean computer, I need you to download:
gparted-live-0.10.0-3.iso (115.1 MB)
Windows XP Recovery Console rc.iso Create two bootable CDs, one for Gparted and one for the Windows XP Recovery Console, from the ISO images. You can use
ImgBurn do this.
Now boot off of the newly created Gparted CD.
You should be here...
Press ENTER
By default, "do not touch keymap" is highlighted. Leave this setting alone and just press ENTER.
Choose your language and press ENTER. English is default [33]
Once again, at this prompt, press ENTER
You will now be taken to the main GUI screen below
According to your logs, the partition that you want to delete is 10MB
Click the trash can icon to delete and then click Apply.
You should now be here confirming your actions:
Now you should be here:
Is "boot" next to your OS drive?
If "boot" is not next to your OS drive under "
Flags", right-mouse click the OS drive while in Gparted and select
Manage FlagsIn the menu that pops up, place a checkmark in
boot like the picture below:
Now
double-click the
button.
You should receive a small pop up like this:
Choose reboot and then press OK.
Now reboot from the Windows XP Recovery Console CD and execute the following commands:
- fixmbr \Device\HardDisk0
- fixboot c:
- exit
Once back in Windows.
Download
MBRCheck.exe to your desktop.
- Be sure to disable your security programs
- Double click on the file to run it (Vista and Windows 7 users will have to confirm the UAC prompt)
- A window will open on your desktop
- if an unknown bootcode is found you will have further options available to you, at this time press N then press Enter twice.
- If nothing unusual is found just press Enter
- A .txt file named MBRCheck_mm.dd.yy_hh.mm.ss should appear on your desktop.
- Attach that file.