Adam Snowball
Posts: 19 +0
Will do. I will let you know how it goes...
-Ads
-Ads
Solved Safe mode BSD and activation loop after virus removal/repair install
- Thread starter Adam Snowball
- Start date
- Status
Jay Pfoutz
Posts: 4,279 +49
Okay. Look forward to it. 
Adam Snowball
Posts: 19 +0
That's done the trick! Booted into safe mode CMD, installed IE 8, booted normally and activated Windows. Running MS Security Essentials and MBAM just in case. Got anything you want me to run to check if something is hiding?
-Ads
-Ads
Jay Pfoutz
Posts: 4,279 +49
Let's try this real quick, then we can finish up and I can give some recommendations on preventing malware.
avast! aswMBR
Please download aswMBR from here
Note: Do not take action against any **Rootkit** entries until I have reviewed the log. Often there are false positives.
avast! aswMBR
Please download aswMBR from here
- Save aswMBR.exe to your Desktop
- Double click aswMBR.exe to run it
- Uncheck "Trace disk IO calls".
- Click the Scan button to start the scan as illustrated below
Note: Do not take action against any **Rootkit** entries until I have reviewed the log. Often there are false positives.
- Once the scan finishes click Save log to save the log to your Desktop
- Copy and paste the contents of aswMBR.txt back here for review
- Please also find MBR.dat on your Desktop, and rename it to MBRscan.txt. Upload that as well. Do not copy and paste MBR.dat/txt, it needs to be uploaded.
Adam Snowball
Posts: 19 +0
aswMBR version 0.9.9.1665 Copyright(c) 2011 AVAST Software
Run date: 2012-11-01 16:14:32
-----------------------------
16:14:32.578 OS Version: Windows 5.1.2600 Service Pack 3
16:14:32.578 Number of processors: 2 586 0x1C02
16:14:32.578 ComputerName: PC154092186412 UserName: John
16:14:33.265 Initialize success
16:14:43.625 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-3
16:14:43.640 Disk 0 Vendor: ST9160314AS 0005HPM1 Size: 152627MB BusType: 3
16:14:43.703 Disk 0 MBR read successfully
16:14:43.718 Disk 0 MBR scan
16:14:43.718 Disk 0 Windows VISTA default MBR code
16:14:43.734 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 152616 MB offset 2048
16:14:43.750 Disk 0 scanning sectors +312560640
16:14:43.859 Disk 0 scanning C:\WINDOWS\system32\drivers
16:15:02.843 Service scanning
16:15:10.062 Service MpKsl85fd2b51 c:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{D11A2E0C-8B91-4839-97D7-4449EB5B0980}\MpKsl85fd2b51.sys **LOCKED** 32
16:15:18.031 Modules scanning
16:15:24.906 Scan finished successfully
16:16:16.046 Disk 0 MBR has been saved successfully to "D:\MBR.dat"
16:16:16.546 The log file has been saved successfully to "D:\aswMBR.txt"
Run date: 2012-11-01 16:14:32
-----------------------------
16:14:32.578 OS Version: Windows 5.1.2600 Service Pack 3
16:14:32.578 Number of processors: 2 586 0x1C02
16:14:32.578 ComputerName: PC154092186412 UserName: John
16:14:33.265 Initialize success
16:14:43.625 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-3
16:14:43.640 Disk 0 Vendor: ST9160314AS 0005HPM1 Size: 152627MB BusType: 3
16:14:43.703 Disk 0 MBR read successfully
16:14:43.718 Disk 0 MBR scan
16:14:43.718 Disk 0 Windows VISTA default MBR code
16:14:43.734 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 152616 MB offset 2048
16:14:43.750 Disk 0 scanning sectors +312560640
16:14:43.859 Disk 0 scanning C:\WINDOWS\system32\drivers
16:15:02.843 Service scanning
16:15:10.062 Service MpKsl85fd2b51 c:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{D11A2E0C-8B91-4839-97D7-4449EB5B0980}\MpKsl85fd2b51.sys **LOCKED** 32
16:15:18.031 Modules scanning
16:15:24.906 Scan finished successfully
16:16:16.046 Disk 0 MBR has been saved successfully to "D:\MBR.dat"
16:16:16.546 The log file has been saved successfully to "D:\aswMBR.txt"
Jay Pfoutz
Posts: 4,279 +49
Jay Pfoutz
Posts: 4,279 +49
Topic marked solved.
- Status
