Zero Access Rootkit--computer won't start up now

I posted a thread about this here:
http://forums.spybot.info/showthread.php?t=63819

And I was referred to these forums. Basically, I somehow picked up the Zero Access Rootkit, which wasn't a serious issue at first, but after a day or so I was unable to fully load Windows. My computer goes up to the XP loading screen, then goes to a black screen with a movable mouse pointer, but will not go further. I have tried loading the last known good configuration and starting in safe mode, and neither one will get any further.

I am using a different computer to post this. I have a legit copy of XP. I have no problem reinstalling Windows if necessary, and I do have a recovery CD, but I have files on my computer that I don't want to lose, and I didn't back them up at the time because I didn't realize how important they were at the time.

I tried slaving the hard drive to another computer, but it is a SATA drive with no jumpers, so I could not do it. Can anyone help?

Hi EastPoint,
Welcome to WTT

The most important thing to do now is to - Recover files from Windows XP hard disk using Puppy Linux.
Puppy works by installing into your RAM only, notyour HD. Once you have booted to the Puppy desktop, to save your data it basicaly works like this:

1) At the bottom left of your desktop a list of all hard drives/partitions, USB Drives, and Optical Drives are listed with a familiar looking hard drive icon.
2) Open your old hard drive i.e. sda1
3) Next, open your USB Flash Drive or External Drive. i.e. sdc or sdb1
If you open the wrong drive, simply X out at the top right corner of the window that opens. (Just like in Windows)
4) From your old hard drive, drag and drop whatever files/folders you wish to transfer to your USB Drive's Window.

It might seem strange and nothing like Windows, but it is as simple as the above.

After that , re-install XP.

Cheers,
Lee

You can even download hiren's boot cd iso and burn it onto a cd. Then load mini windows xp from the cd menu and copy the files which you want to a usb disk. Hiren's is a bootable disc which has many useful tools including mini windows xp for solving almost any computer problems. The mini windows xp would boot from the disc.

Hmm quick question have you tried to run explorer.exe from the point where you get black screen with movable mouse?. It goes like this: get yourself task manager (ctrl-alt-del) check the processes look for explorer.exe if there is one kill that process - then press file - new task (run) - write explorer or explorer.exe and click ok. if it runs then you can fix your computer without reinstalling it

WTT does NOT allow discussion of disk images using WindowsPE, such as Hiren's BootCD The license does not appear to allow redistribution. Until Microsoft resolves this issue, the WTT admin team respectfully asks that you not use these tools, or any tools that redistribute WinPE.

You are so smooth LD

"God" is always smooth

WTT does NOT allow discussion of disk images using WindowsPE, such as Hiren's BootCD

The license does not appear to allow redistribution. Until Microsoft resolves this issue, the WTT admin team respectfully asks that you not use these tools, or any tools that redistribute WinPE.

sorry, I was not knowing that. I Would not discuss about it in future.

EastPoint,

How are you coming along ?

Sorry, I thought I had enabled email notification, and had not received any, so I assumed no one had posted. Just checked today and found the opposite. I ended up buying an adaptor to treat the hard drive like an external drive, then pulled all my files off onto another computer, then reinstalled Windows, which appears to have done the trick.

I am looking over your DDS log at Safer and will post to you soon