XP Boot Fail after post

Tried that with the first drive that failed, and eventually had to do a clean install.

I am re-imaging the 2nd drive just like I did before and once it is up I will run Malwarebytes and see if that catches the bug...

Just hoping I don't loose every thing  because it appears the back up is infected also.

Question - was there something that happened virus / malware wise on 10/22 (date of inital failure, 1017 was date of last backup)  I ask because before that everything seemed ok.  

I'll keep you posted of how the re-image and malwarebytes scan goes.

I've came accross a good amount of machines in the last few weeks that had a black screen with mouse cursor only. Even a repair installation it gave same issue.
The common thing on all of them was a backdoor bot (system32\~.exe) which mbam and combofix can detect and remove.

Thanks,
Once I complete the operation on the 2nd drive - I'll let you know what I find.
do you know the name of the bot?  

No, just generic classification as "backdoor bot" . Could also be a rootkit

ran mbam and combofix, but didn't attempt re-boot between them.

other than the short time it ran after the re-image get the same results.

I have a dell latitude D810 it should be ok with a 160G or 320G drive right?
with default Cmos settings?   I ask because somewhere I saw someone asking about LBA - didn't think it would be an issue anymore.  and the 160 ran good for about 4 months... ?

Overnight I thought that the one other thing that has remained each time it failed was the internet connection - so I am going to give it another go and turn off the connection.  

my other option is to use an older image - but I don't know how far back to go to avoid the infection - any insight on this?

Thanks again.

Glad to be seeing some sort of light at the end of the tunnel...
Lynne

Q - on this backdoor bot - was there a date in common when the others failed?

Mine first failed on 10/22 after I shut it down in the morning.. and re-booted when I came home.
I don't recall how long it had been running before I shut it down that am.

Thanks,
Lynne

No specific date but all in October so far!

So even on the new hard drive with the latest image from ghost you are getting a black screen with mouse cursor?

Well it could mean that the motherboard or HD controller is dying or you have an overheating issue

I hope this helps !

Had to step away for a day.
still same problem - trying one more - if that doesn't work, I may just back up what I can and start all over.

Ok - Progress!  
I re-imaged the drive (Using Norton Ghost 14 for backup/etc)  - but let it sit for a couple of days.  
This morning it re-booted it self from Norton ( must have a timer)

As it was booting I turned off the wireless connection ( and it is still off by the way)
Updated and installed Malware Bytes
Ran it
Found 5 problems:
(file attached)

and rebooted before doing anything else - it Worked!

I am going to make a backup of where it is at now.
Do you have any other suggestions on how I can make sure this is clean!

Also for Virus I am running Avira and I have CC Cleaner installed.
I don't have a firewall other than windows - which may have been my problem.

What would you recommend I use to protect my systems?  
I have Sunbelts Vipre on my other systems - and they are ok, but then they aren't used as much and weren't running much at all until my dell crashed.

Also run these:

Atf cleaner to clear temp files http://www.atribune.org/index.php?option=com_content&task=view&id=25&Itemid=25

Hijackthis http://free.antivirus.com/hijackthis/ (attach its file)

http://www.surfright.nl/en/hitmanpro (once scanned you can uninstall it after a reboot)

I don't have any experience with both of those but if they are paid versions best keep them until expired.
I use Eset http://www.eset.com/

Thanks,
I ran what you asked and the hjt files are attached. (ran before hitman)

Thanks so much for your help.

Lynne

adding startuplist.txt file

Thanks,

hitman only found the exe files for things like combofix, mgtools, - the ones I had just installed to clean the computer with - I had back ups so I let it delete them.

with the iobit - should I remove the cc cleaner also?

correction:
 the program I was asking about re IObit was Advanced System Care - should I remove that?

Well it's up to yourself but not a fan of a program which "optimizes" and messes with the registry!

Thank you for all your help.
Every thing seems to be fine so I am going to close out this case.

You were the only ones who really acknowledged that there was something going on "out there" and multiple people had this problem and a real fix for it.

I am an engineer and work on high tech semiconductor manufacturing equipment and I so appreciate competent support when I get it.

Lynne