flices.biz/gate.php

[polonus]

This is the definition of a file infector virus: http://www.virusbtn.com/resources/glossary/file_infector_virus.xml
It is a family of malware viruses that will (re-)infect particular files or make certain files can no longer be used (are crippled beyond use)
There is a wide array of file infectors that can be easily cleansed, but there are also those that lead to a so-called  "total recall" operation,
see: http://www.ehow.com/how_4899970_reformat-after-computer-virus.html
Do not panick this is only if the virus was able to cripple the computer beyond rescue and repair, and I think you are far from that point.
So stay with essexboy and let him guide you further  through these cleansing routines,

polonus

[burnside]

Thanks, polonus, it is reassuring to know that I need not panic....as yet.

essexboy - do you mean the windows installation CD?  If so, the answer is no.  Everthing came installed on the laptop - though I do have a recovery CD.

[essexboy]

They are on your C drive and RogueKiller has determined that there is a problem with those files.  Now whether it is the MD5 or an als attached I do not know, but it is an indicator.   The lack of detection concerns me as it may be an unknown infection

Is Avast reporting any of them ?

And the symptoms you are seeing would suggest that it is something new


If you do not have a windows CD could you let me know the make and model of the computer so that I can locate the recovery partition. 

I personally would not trust that system with anything

[polonus]

Hi burnside and essexboy,

The clue in the logs "Acer tatooed MBR Code" led me to suggest a scan with the FarBar recovery scan tool. Of course this is up to essexboy to decide,

polonus

[burnside]

Hi

"MD5 or an als attached" I have no idea what that means.  Feel so stupid!

No, Avast is not reporting anything.

I was hoping that it was something new and not something lying dormant awaiting activation. 

Acer 3053WXMi

[essexboy]

An alternative is to see if windows can replace the files

Download  Windows Repair (all in one)  from this site

Install the programme then run



Go to step 3 and allow it to run SFC

[burnside]

Many thanks, essex boy.  I will download Windows repair as soon as I have some quiet time and can concentrate on the issue.

Do you know if SFC is going to ask for responses?  Concerned that it may ask me if I want to repair something and that I won't have a clue!

[essexboy]

Yes it may ask for the windows disc..  as a fair few files may need to be replaced

[burnside]

Ok, but I do not have the windows installation disk.  I will not be able to replace the files.

Having watched the Windows Repair video it would seem that I will need the installation CD.  As mentioned previously, all I have are the 7 Acer eRecovery disks.

[essexboy]

Do you have an i386 folder on the root C drive ?  i.e. C:\i386 ?

[burnside]

Yes.

[essexboy]

OK when SFC requires the disc there should also be a browse option if there is then point it to the i386 folder...  If there is no browse option then a small registry change will need to be made

Click on the Start button, type REGEDIT in the Run dialog box off the Start Menu, click OK, and then navigate to the following key in the left pane of the Regedit window:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\

When you click on the last subkey (Setup), you will see in the right pane a value called SourcePath, which will point to your CD-ROM drive. Assuming that you have made the copy of the I386 folder to the root of your C: drive, then all you have to do is double click on this value and change it to point to C: instead.

[burnside]

Okay, many thanks!  I will wait until the morning and start with a fresh head.  Is there any chance it could all go wrong???    Am I correct in thinking that Windows Repair will fix/repair and replace with uncorrupted files from i386?  Is there any chance that the files on i386 could be corrupted in someway? 

I am extrememly grateful for the on going assistance. 

[burnside]

Sorry to be a nusiance but, last night, I asked if there is any chance that the files on i386 could be corrupted in someway?  I am about to download Windows Repair and proceed but am worried that i386 may not work.

Thank you

[essexboy]

i386 is protected so there should be no corrupt files there