So the avast threat detector was popping up with no browser open.
And… holding my breath… wait a sec… THAT LAST THING WORKED!
Hip hip hurray! (Essexboy up on my family’s shoulders and carried jubilantly around the room.)
HUZZAH! HUZZAH! Below is log. Does it look gone to you??? ;D ;D ;D ;D ;D ;D ;D
18:55:07.0605 3880 TDSS rootkit removing tool 2.8.16.0 Feb 11 2013 18:50:42
18:55:08.0244 3880 ============================================================
18:55:08.0244 3880 Current date / time: 2013/08/29 18:55:08.0244
18:55:08.0244 3880 SystemInfo:
18:55:08.0244 3880
18:55:08.0244 3880 OS Version: 6.0.6002 ServicePack: 2.0
18:55:08.0244 3880 Product type: Workstation
18:55:08.0244 3880 ComputerName: SONYLAPTOP
18:55:08.0244 3880 UserName: Ken
18:55:08.0244 3880 Windows directory: C:\Windows
18:55:08.0244 3880 System windows directory: C:\Windows
18:55:08.0244 3880 Running under WOW64
18:55:08.0244 3880 Processor architecture: Intel x64
18:55:08.0244 3880 Number of processors: 2
18:55:08.0244 3880 Page size: 0x1000
18:55:08.0244 3880 Boot type: Normal boot
18:55:08.0244 3880 ============================================================
18:55:11.0770 3880 BG loaded
18:55:13.0377 3880 Drive \Device\Harddisk0\DR0 - Size: 0x4A85D56000 (298.09 Gb), SectorSize: 0x200, Cylinders: 0x9801, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type ‘K0’, Flags 0x00000040
18:55:13.0470 3880 ============================================================
18:55:13.0470 3880 \Device\Harddisk0\DR0:
18:55:13.0486 3880 MBR partitions:
18:55:13.0486 3880 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x15EB800, BlocksNum 0x23E42AB0
18:55:13.0486 3880 ============================================================
18:55:13.0657 3880 C: ↔ \Device\Harddisk0\DR0\Partition1
18:55:13.0657 3880 ============================================================
18:55:13.0657 3880 Initialize success
18:55:13.0657 3880 ============================================================