In the current state, I can't boot Windows in normal or safe mode without a BSOD STOP 007E error.
I have a backup procedure whereby I clone my Primary/boot drive to one of two identical physical drives in a drive caddy placed in my DVD slot. For clarity, I label the drives as follows.
Primary: Always stays in the laptop and is cloned to the other two. [Olimark/Blue screens]
Bkup #1: 1st rotating backup/destination (last clone: 8/1/2010)
Bkup #2: 2nd rotating backup/destination (last clone: 9/1/2010) [Olimark/Blue screens]
As you can see, the most recent clone target, Bkup #2, is also infected with the Olmarik MBR trojan. However, Bkup #1 is NOT infected with Olmarik.
I would like to clean my Primary drive, as I have added lots of data files and installed several programs since that time. I installed Bkup #1 (non-infected) as my boot drive and the infected Primary drive in the caddy slot (so it's non-bootable). I then booted and applied all NOD 32 and Windows updates.
When taking the machine to the shop, they were working on Bkup #2, as I didn't want anyone to mess with the primary b/c all of the data is intact. I put the Primary drive in a SATA-USB enclosure and plugged it into a non-infected desktop machine. I run ESED NOD32 on all of my machines, and after a minute I got a popup that indicated an MBR trojan. Unfortunately, NOD32 is unable to clean the infection. This could be due to either of 2 reasons.
1. NOD32 can't fix MBR infections on a non-bootable drive
2. This Lenove/IBM T61p laptop has a non-standard sized MBR, as I discovered years ago when my cloned drives weren't bootable.
Here's the info from the NOD32 logs.
Scanner: Startup scanner
Object: boot sector
Name: MBR sector of the 1. physical disk
Threat: Win32/Olmarik.ADA trojan
Action: error while cleaning - operation unavailable for this object type
After searching this board for how to fix a machine with a recurring blue screen, I found the following topic.
I followed the instructions and created the PE Builder boot CD and generated the OTL.txt and Extra.txt files. I'm attaching them, as they are too large to be included in this post.
How can I make a bootable CD that will fix my MBR infection? If possible, I'd like to be able to scan/fix the Primary drive while it's not bootable, as this should minimize any additional damage done. At this point, I have two ways that I can boot my machine into a stable configuration.
1. Boot from the PE Builder CD
2. Install Bkup #1 as my boot drive. The Primary can be installed in a caddy and inserted into my DVD slot and is available as physical 1/logical D: