This virus arrived with a malware attack about a month ago. I have cleaned out several malware attempts on my computer in the last year, so I was confident about fighting it. Perhaps I was overconfident.
My computer was still not behaving right after using Malwarebytes to clean out the malware. I got several site redirects when trying to use the internet, and the computer would not shut down when I tried to shut down normally.
I downloaded two free antivirus programs from the internet at work and took them home to load on my home computer. These programs are Avira, and Avast! Avira did not take care of the problem. Avast! was doing a great job, but when I clicked the button to remove the viruses it had detected, the computer locked up right after Avast! warned that the virus was reacting to the attempt to erase.
I restarted the computer using the Recovery Module and erased the first file Avast! said was infected. The second file was said to not be found. I assumed (hoped) that Avast had been successful erasing it. I restarted the computer and got a blue screen of death (sort of).
Avast! identified the virus as the RloaderB virus. Avira had told me the virus was BOO.Tdss
Avast! said the infection was in the following places:
MBR:\\.\Physical Drive 0
C:\Windows\System32\Drivers\acpi.sys this is the file I deleted using the Recovery Module.
The blue screen of death said the following:
A problem has been detected. Windows has been shut down to prevent damage to your computer. Run CHKDSK /F to verify whether there is any damage to your hard drive.
Technical information: STOP: 0x0000007B (0xBA4C7524, 0xC0000034, 0x00000000, 0x00000000)
I ran CHKDSK /F from the command prompt in Safe Mode. It said my hard drive is OK. I got the same blue screen of death when I rebooted after that.
I can try to reinstall Windows XP, or upgrade to Vista. Why dont I think this is a good idea? I cannot currently boot up to Windows at all. Can anyone help with this one?
Edited by hamluis, 10 October 2011 - 12:01 PM.
Moved from XP to Am I Infected.