soto21

Sweet! Looks like that solves the problem. THANKS!!!

mastercosby

Wewt, fixed for me too. Also, windows live messenger is working again .

For anyone who hasn't tried it yet, make sure you right click and do "repair and reboot" and not just "repair" or it won't fix it.

winston

Glad it's working out. Our computer seems to have stayed fixed. Who would of thought a new MBR virus? Crazy.

Jez

Thanks guys, I've been having problems with my PC for about a week now, today it got really bad, was stumped as to what the problem was with google searches seeming to suggest hardware problems, came across this thread and carried out the suggestions and found the MBR rootkit, repaired and removed, now seems to be working fine.

How3000

My trouble started with a random shutdown while I was surfing. So far I've run every diognositc on the recovery discs, as well as Malewarebytes, Hijack this and Registry cleaner. The problem is still there.

paxtec

Hi Guys,
Just found this thread discussing the same problems I'm suffering from. I'm a bit of a novice to fixing broken computers, automobiles are more my thing!! I've followed the advice above run RootRepeal2 and scanned my files but it only flags these files:

Hidden/Locked Files
-------------------
Path: C:\WINDOWS\Temp\Perflib_Perfdata_698.dat
Status: Allocation size mismatch (API: 16384, Raw: 0)

Path: C:\Documents and Settings\All Users\Application Data\Kontiki\error.log
Status: Size mismatch (API: 1873966, Raw: 1873682)

Path: C:\Documents and Settings\Peter\Local Settings\Temp\etilqs_cx0qQrcAYU32W6FFjDO3
Status: Allocation size mismatch (API: 16384, Raw: 0)

Path: C:\WINDOWS\system32\wbem\Logs\wmiprov.log
Status: Size mismatch (API: 28078, Raw: 28004)

Path: C:\Documents and Settings\All Users\Application Data\Microsoft\Windows Home Server\logs\WHSTrayApp.041409_1704.log
Status: Size mismatch (API: 10070, Raw: 9890)

none of which look like MBR rootkit files or am I missing something. All advice gratefully received!!

Laptopproblems

Hey guys,
I ran into the same problem as you did a week and 5 days ago, and even after a dell technician replaced the fan, heat sink and mother board, I still get the same problem.

I downloaded the program and ran the tests, but I could not find the mbv... either my comptuer does not have it or I do not know where to look for it. What section of the scan did you guys find the virus (like what "Subheading" of the scan was it under) and what did i tlook like (i.e was it called master boot virus). Any help woudl be greatly appreciated.

Ben J Meadows

I was suffering the same symptoms. I found this program as well > http://www.prevx.com/blog.asp Some portions of it are free and other portions (realtime scan) are not. I couldn't use RootRepeal because I kept getting a blue screen. Prevx found and cleaned the rootkit out.

Usually I don't post to websites like this but I felt I had to. I want to thank everyone here for putting me on to the rootkit issue. I can't believe no other sites have picked up on this issue. This is really widespread. Thanks again everyone!!

ukunapul

Thank you Ben Meadows and Matt Dragon, I had the same issue since a few days. I have a Dell E1505 with Windows XP MCE. For me, RootRepeal did not detect anything (just as it was for paxtec in the post above). I tried out prevx as suggested by Ben Meadows and it reported an MBR virus. I really don't know if the issue is gone for good on my PC since I just finished cleaning up using PrevX a few minutes back. But I am really glad that I am not the only one who has suddenly been having this extremely frustrating issue. I was already thinking of buying a new PC.

uwer

Same issues here on an Acer Aspire T630 XP MCE SP3
Slow freeze, then continuous beep from the mainboard beeper. Hard shutdown required.
Prevx found an MBR rootkit, which it cleaned.

Thanks for this helpful disussion.

uwer