Badly Infected

[oldman960]

Hi e28ct17,

Not sure why that happened as we didn't fix anything. Can you recall if the computer was rebooted after you ran combofix the first time other than the reboot combofix did?

You do have a rogue partition which we will work on removing. First though let's make sure nothing as changed.

Delete MBR.zip from the jump drive. Reboot the sick computer with the xPUD CD and run dumpit like you did before. After you have the new mbr.zip shut the computer down, don't bother to trying to boot to windows.

Attach the mbr.zip to your next reply.

[e28ct17]

When I booted my computer with the boot disk this is what came up on the screen:

[6.382827] sd 7:0:0:0: [sdg] Assuming drive cache: write through
[6.382827] sd 7:0:0:0: [sdg] Assuming drive cache: write through
[6.382827] sd 7:0:0:0: [sdg] Assuming drive cache: write through
giving up.
xinit: No such file or directory (errno 2): unable to connect to X server
xinit: No such process (errno 3): Server error.
xauth: (argu):1: bad display name "(none):0" in "remove" command
sh: no job control in this shell
sh-4.0#

[oldman960]

Hi Hi e28ct17,

I've asked for some assistance with why you are recieving that message from xPUD. Be back ASAP.

Thanks for you patience.

[oldman960]

Hi e28ct17,

Let's see if we can get this computer to boot to windows.

Remove the CD if it's in the machine.

• Restart the computer
• If given the option to do a Repair either cancel it or select "Start Windows Normally"

Did it boot to windows?

If it did boot to Windows, shut the computer down normally and reboot. Did it start normally?

If the computer did not boot properly after selecting "Start Windows normally"

• reboot the computer
• while the computer is rebooting press the F10 to bring up 'Edit Boot Options' screen. (if it's pressed too early you might get the bios screen instead. )
  
  The correct screen looks similar to this (yours will say Vista)
  
  
• If it says /minint or int/min after /NOEXECUTE=OPTIN,
  
  hit the Backspace key until that entry reads:
  
  /NOEXECUTE=OPTIN
  
• hit enter
  

Did the computer boot?

Let me know how you made out.

[e28ct17]

Yes, it booted fine. Internet Explorer and Firefox are working too!