Rootkit block but Blue screen and XP won't load

Viruses and worms
1

I got a pop up that Avast had blocked a Rootkit. But it went right to blue screen with “Error Hard” or something like that. Now XP will not load. Just get a flashing cursor.

I downloaded and created the Linux version and ran it. There was a couple of warning threats from PC AnyWhere but that was it.

I would imagine I have to fix the boot sector or something but there are a couple of files I need to make copies of first. How do I do that? Make a dos boot disk and copy to my flash drive?

Thanks

2

welcome to the forum.

it seems like you have been hit very hard of that malware if your not able to get into xp i suggest you try an resue cd from companys like dr web cure it or avira.

http://www.freedrweb.com/livecd/ download from an clean computer and burn it to a cd. then boot with that cd in the infected computer and let it scan and see if it can solve the pronblem so you can boot up xp again. don’t forget to update the datebase before scanning, dr web cure it is one of few thats offer updates to there resue disk.

let us know how it goes or if you need more help, and good luck.

3

Resolution:

  1. I created a boot disk with Linux and Avast and ran that. No threats found. I tried to make one for Malwarebytes but was unable to.

  2. I ran the Recovery Console from the original XP disk shipped with my Laptop. (Thank goodness I could find it). I ran the repair Boot sector successfully and could boot Windows again.

  3. I ran Malware bytes and found no threats.

I looked at the Avast log and found these entries:
11/04/2010 Win32-Alureon-KF Rtk { this was the day I had the problem)

11/12/2010 Win32-Alureon-KM Trj ( This was the first day booting WinXP after repairing the boot sector)

The reason for the gap, is I sent my Laptop to get a backup in case I had to reformat.

My question is why did Avast block the rootkit, but the boot sector was still corrupted? Is the pay for version better equipped to handle this rootkit?
Thanks,
Mike