Hello. I’m going to go ahead and appologize if I’m a bit unclear anywhere in this post as I’m not 100% certain how to phrase what happened. Also if this isn’t in the proper forum.
A few days ago I got the following alerts from avast.
3/4/2010 9:22:41 PM 1267755761 SYSTEM 1216 Sign of “Win32:Rootkit-gen [Rtk]” has been found in “C:\WINDOWS\system32\drivers\Npfs.SYS” file.
3/4/2010 9:23:08 PM 1267755788 SYSTEM 1216 Sign of “Win32:Rootkit-gen [Rtk]” has been found in “C:\WINDOWS\system32\drivers\ALCXWDM.SYS” file.
I clicked delete when they popped up and proceeded to attempt to restart my computer in safe mode to run mbam to get rid of an “antivirus” program that installed itself on my computer. When I tried to restart though I kept getting an “Invalid form id” error and had to do a system recovery. It allowed me to keep all of my old information in a seperate partition of my hard drive though and make a new partition labeled “recovery”. My question is, is there any way for me to fix the problem on the old partition and allow me to access all of my old information again? Also after I do that is there a way I can delete the new partition?