Windows Delayed Write Error pop up

Try mbrcheck one time. If it locks up just post what you can. I'm pretty sure this is the infected drive as it's still showing D:

locked up again here is the log file MBRCheck, version 1.2.3 © 2010, AD Command-line: Windows Version: Windows XP Home Edition Windows Information: Service Pack 3 (build 2600) Logical Drives Mask: 0x000005f9 Kernel Drivers (total 136): 0x804D7000 \WINDOWS\system32\ntkrnlpa.exe 0x806E5000 \WINDOWS\system32\hal.dll 0xBA5A8000 \WINDOWS\system32\KDCOM.DLL 0xBA4B8000 \WINDOWS\system32\BOOTVID.dll 0xB9E91000 sptd.sys 0xB9E63000 ACPI.sys 0xBA5AA000 \WINDOWS\system32\DRIVERS\WMILIB.SYS 0xB9E52000 pci.sys 0xBA0A8000 ohci1394.sys 0xBA0B8000 \WINDOWS\system32\DRIVERS\1394BUS.SYS 0xBA0C8000 isapnp.sys 0xBA670000 pciide.sys 0xBA328000 \WINDOWS\system32\DRIVERS\PCIIDEX.SYS 0xBA0D8000 MountMgr.sys 0xB9E33000 ftdisk.sys 0xBA330000 PartMgr.sys 0xBA0E8000 VolSnap.sys 0xB9E1B000 atapi.sys 0xB9DDB000 mv61xx.sys 0xB9DC3000 \WINDOWS\system32\DRIVERS\SCSIPORT.SYS 0xBA0F8000 disk.sys 0xBA108000 \WINDOWS\system32\DRIVERS\CLASSPNP.SYS 0xB9DA3000 fltmgr.sys 0xB9D91000 sr.sys 0xBA118000 PxHelp20.sys 0xB9D7A000 KSecDD.sys 0xB9CED000 Ntfs.sys 0xB9CC0000 NDIS.sys 0xB9CA6000 Mup.sys 0xB9762000 \SystemRoot\system32\DRIVERS\intelppm.sys 0xB9085000 \SystemRoot\system32\DRIVERS\ati2mtag.sys 0xB9071000 \SystemRoot\system32\DRIVERS\VIDEOPRT.SYS 0xB9049000 \SystemRoot\system32\DRIVERS\HDAudBus.sys 0xBA480000 \SystemRoot\system32\DRIVERS\usbuhci.sys 0xB9025000 \SystemRoot\system32\DRIVERS\USBPORT.SYS 0xBA488000 \SystemRoot\system32\DRIVERS\usbehci.sys 0xB9613000 \SystemRoot\system32\DRIVERS\l1e51x86.sys 0xB8EC3000 \SystemRoot\system32\drivers\P17xfi.sys 0xB8E9F000 \SystemRoot\system32\drivers\portcls.sys 0xB9603000 \SystemRoot\system32\drivers\drmk.sys 0xB8E7C000 \SystemRoot\system32\drivers\ks.sys 0xB8E4A000 \SystemRoot\system32\DRIVERS\ctoss2k.sys 0xB8E23000 \SystemRoot\system32\DRIVERS\ctsfm2k.sys 0xB8812000 \SystemRoot\system32\drivers\p17xfilt.sys 0xB95C3000 \SystemRoot\system32\DRIVERS\nic1394.sys 0xBA4A8000 \SystemRoot\system32\DRIVERS\fdc.sys 0xBA5F0000 \SystemRoot\system32\DRIVERS\ASACPI.sys 0xB95B3000 \SystemRoot\system32\DRIVERS\serial.sys 0xB9BAF000 \SystemRoot\system32\DRIVERS\serenum.sys 0xB95A3000 \SystemRoot\system32\DRIVERS\i8042prt.sys 0xBA4B0000 \SystemRoot\system32\DRIVERS\kbdclass.sys 0xB9593000 \SystemRoot\system32\DRIVERS\imapi.sys 0xBA198000 \SystemRoot\system32\DRIVERS\cdrom.sys 0xBA1A8000 \SystemRoot\system32\DRIVERS\redbook.sys 0xBA350000 \SystemRoot\system32\DRIVERS\GEARAspiWDM.sys 0xBA6CC000 \SystemRoot\system32\DRIVERS\audstub.sys 0xBA1D8000 \SystemRoot\system32\DRIVERS\rasl2tp.sys 0xB9BA7000 \SystemRoot\system32\DRIVERS\ndistapi.sys 0xB87FB000 \SystemRoot\system32\DRIVERS\ndiswan.sys 0xBA308000 \SystemRoot\system32\DRIVERS\raspppoe.sys 0xBA168000 \SystemRoot\system32\DRIVERS\raspptp.sys 0xBA380000 \SystemRoot\system32\DRIVERS\TDI.SYS 0xB87EA000 \SystemRoot\system32\DRIVERS\psched.sys 0xBA1E8000 \SystemRoot\system32\DRIVERS\msgpc.sys 0xBA388000 \SystemRoot\system32\DRIVERS\ptilink.sys 0xBA390000 \SystemRoot\system32\DRIVERS\raspti.sys 0xBA208000 \SystemRoot\system32\DRIVERS\termdd.sys 0xBA398000 \SystemRoot\system32\DRIVERS\mouclass.sys 0xBA5F2000 \SystemRoot\system32\DRIVERS\swenum.sys 0xB878C000 \SystemRoot\system32\DRIVERS\update.sys 0xB9B9B000 \SystemRoot\system32\DRIVERS\mssmbios.sys 0xBA1F8000 \SystemRoot\System32\Drivers\NDProxy.SYS 0xAB1C6000 \SystemRoot\system32\drivers\AtiHdmi.sys 0xBA248000 \SystemRoot\system32\DRIVERS\usbhub.sys 0xBA616000 \SystemRoot\system32\DRIVERS\USBD.SYS 0xAAA43000 \SystemRoot\system32\drivers\RtkHDAud.sys 0xBA450000 \SystemRoot\system32\DRIVERS\flpydisk.sys 0xBA620000 \SystemRoot\System32\Drivers\Fs_Rec.SYS 0xBA698000 \SystemRoot\System32\Drivers\Null.SYS 0xBA622000 \SystemRoot\System32\Drivers\Beep.SYS 0xBA470000 \SystemRoot\System32\drivers\vga.sys 0xBA624000 \SystemRoot\System32\Drivers\mnmdd.SYS 0xBA626000 \SystemRoot\System32\DRIVERS\RDPCDD.sys 0xBA458000 \SystemRoot\System32\Drivers\Msfs.SYS 0xBA468000 \SystemRoot\System32\Drivers\Npfs.SYS 0xB7298000 \SystemRoot\system32\DRIVERS\rasacd.sys 0xA9918000 \SystemRoot\system32\DRIVERS\ipsec.sys 0xA98BF000 \SystemRoot\system32\DRIVERS\tcpip.sys 0xA9897000 \SystemRoot\system32\DRIVERS\netbt.sys 0xA9871000 \SystemRoot\system32\DRIVERS\ipnat.sys 0xB9732000 \SystemRoot\system32\DRIVERS\wanarp.sys 0xB7238000 \SystemRoot\System32\drivers\ws2ifsl.sys 0xA97AF000 \SystemRoot\System32\drivers\afd.sys 0xB9722000 \SystemRoot\system32\DRIVERS\arp1394.sys 0xB9712000 \SystemRoot\system32\DRIVERS\netbios.sys 0xB7284000 \SystemRoot\system32\DRIVERS\ssmdrv.sys 0xA975C000 \SystemRoot\system32\DRIVERS\rdbss.sys 0xA96EC000 \SystemRoot\system32\DRIVERS\mrxsmb.sys 0xB9702000 \SystemRoot\System32\Drivers\Fips.SYS 0xB7254000 \SystemRoot\system32\DRIVERS\USBSTOR.SYS 0xA63B0000 \SystemRoot\system32\DRIVERS\avipbb.sys 0xBA664000 \SystemRoot\system32\drivers\AsIO.sys 0xA9787000 \SystemRoot\system32\DRIVERS\hidusb.sys 0xA6E0D000 \SystemRoot\system32\DRIVERS\HIDCLASS.SYS 0xBA490000 \SystemRoot\system32\DRIVERS\HIDPARSE.SYS 0xBA3B0000 \SystemRoot\system32\DRIVERS\usbccgp.sys 0xB7228000 \SystemRoot\system32\DRIVERS\mouhid.sys 0xA97E1000 \SystemRoot\system32\drivers\usbaudio.sys 0xA4C1B000 \SystemRoot\system32\drivers\skfilt.sys 0x9E9D9000 \SystemRoot\System32\Drivers\Fastfat.SYS 0x9F7D7000 \SystemRoot\System32\Drivers\dump_diskdump.sys 0x9E999000 \SystemRoot\System32\Drivers\dump_mv61xx.sys 0xBF800000 \SystemRoot\System32\win32k.sys 0x9F61E000 \SystemRoot\System32\drivers\Dxapi.sys 0x9F251000 \SystemRoot\System32\watchdog.sys 0xBF000000 \SystemRoot\System32\drivers\dxg.sys 0xBA6AC000 \SystemRoot\System32\drivers\dxgthk.sys 0xBF012000 \SystemRoot\System32\ati2dvag.dll 0xBF062000 \SystemRoot\System32\ati2cqag.dll 0xBF0EB000 \SystemRoot\System32\atikvmag.dll 0xBF158000 \SystemRoot\System32\atiok3x2.dll 0xBF19B000 \SystemRoot\System32\ati3duag.dll 0xBF583000 \SystemRoot\System32\ativvaxx.dll 0xBF9C7000 \SystemRoot\System32\ATMFD.DLL 0x9C6A9000 \SystemRoot\system32\DRIVERS\avgntflt.sys 0xA4E34000 \SystemRoot\system32\DRIVERS\ndisuio.sys 0x9C62C000 \SystemRoot\system32\DRIVERS\mrxdav.sys 0x9C55C000 \SystemRoot\system32\DRIVERS\srv.sys 0x9C3DF000 \SystemRoot\system32\drivers\wdmaud.sys 0xA3A84000 \SystemRoot\system32\drivers\sysaudio.sys 0x9C341000 \SystemRoot\system32\drivers\ctusfsyn.sys 0x9C3F4000 \SystemRoot\System32\Drivers\Cdfs.SYS 0x9BDD0000 \SystemRoot\System32\Drivers\HTTP.sys 0xA3958000 \??\D:\DOCUME~1\ALEX~1.HOM\LOCALS~1\Temp\mbr.sys 0x9BA5D000 \SystemRoot\system32\drivers\kmixer.sys 0x7C900000 \WINDOWS\system32\ntdll.dll Processes (total 41): 0 System Idle Process 4 System 672 D:\WINDOWS\system32\smss.exe 736 csrss.exe 772 D:\WINDOWS\system32\winlogon.exe 816 D:\WINDOWS\system32\services.exe 828 D:\WINDOWS\system32\lsass.exe 1004 D:\WINDOWS\system32\ati2evxx.exe 1020 D:\WINDOWS\system32\svchost.exe 1096 svchost.exe 1200 D:\WINDOWS\system32\svchost.exe 1320 svchost.exe 1396 svchost.exe 1464 D:\WINDOWS\system32\ati2evxx.exe 1588 D:\WINDOWS\system32\spoolsv.exe 1636 D:\Program Files\Creative\Shared Files\CTAudSvc.exe 600 svchost.exe 636 D:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe 716 D:\Program Files\Bonjour\mDNSResponder.exe 1180 D:\Program Files\Java\jre6\bin\jqs.exe 1416 D:\Program Files\Nero\Update\NASvc.exe 1804 D:\WINDOWS\system32\svchost.exe 476 alg.exe 1704 D:\WINDOWS\explorer.exe 1784 D:\WINDOWS\RTHDCPL.exe 1908 D:\Program Files\ASUS\Six Engine\SixEngine.exe 1932 D:\WINDOWS\system32\rundll32.exe 1944 D:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe 2052 D:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe 2172 D:\Program Files\iTunes\iTunesHelper.exe 2244 D:\Program Files\Common Files\Java\Java Update\jusched.exe 2292 D:\WINDOWS\system32\ctfmon.exe 2420 D:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe 2524 D:\Program Files\iPod\bin\iPodService.exe 3348 D:\Program Files\Internet Explorer\iexplore.exe 3468 D:\Program Files\Internet Explorer\iexplore.exe 2432 D:\WINDOWS\system32\svchost.exe 3768 D:\Program Files\Internet Explorer\iexplore.exe 468 wmiprvse.exe 3784 D:\Program Files\Internet Explorer\iexplore.exe 3948 D:\Documents and Settings\Alex.HOME-0F9204D933\Desktop\MBRCheck.exe \\.\D: –> \\.\PhysicalDrive0 at offset 0x00000000`00007e00 (NTFS) PhysicalDrive0 Model Number: Maxtor 6Y080L0, Rev: Size Device Name MBR Status ——————————————– 76 GB \\.\PhysicalDrive0

Please download GetPartitions from the link bellow. You must right click on the link and choose Save as…. Save it as GetPartitions.bat on your desktop

getpartitions.bat

Double click it to run it (If running Vista or Windows 7, right click on it and select "Run as an Administrator").
It will produce D:\DiskReport.txt log please post results from that log here to me.

did that, just pops up and closes no log report nothing

Not sure how far you want to go, but we can keep trying.


Please download GMER from one of the following locations and save it to your desktop:

• Main Mirror
  This version will download a randomly named file (Recommended)
• Zipped Mirror
  This version will download a zip file you will need to extract first. If you use this mirror, please extract the zip file to your desktop.

Before scanning, make sure all other running programs are closed and no other actions like a scheduled antivirus scan will occur while the scan is being performed. Do not use your computer for anything else during the scan.

• Double click GMER.exe.
  [external image: Posted Image]
• If it gives you a warning about rootkit activity and asks if you want to run a full scan…click on NO, then use the following settings for a more complete scan..
• In the right panel, you will see several boxes that have been checked. Ensure the following are UNCHECKED …
  • Sections
  • IAT/EAT
  • Drives/Partition other than Systemdrive (typically C:\)
  • Show All (don't miss this one)
    [external image: Posted Image]
    Click the image to enlarge it
• Then click the Scan button & wait for it to finish.
• Once done click on the [Save..] button, and in the File name area, type in "ark.txt"
• Save the log where you can easily find it, such as your desktop.

**Caution**
Rootkit scans often produce false positives. Do NOT take any action on any "<— ROOKIT" entries
Please copy and paste the report into your Post.

I guess my chances of having a clean system are looking grim? If you think so then I'll start backing up my files, its mostly just my music and a few other files(pictures etc etc) i need to back up most of the other programs I can restall and download

That's what I'd suggest.
Then reformat /Both drives install Windows , hooking up one at a time.

alright, i'll backup what I can to my D drive which is my music etc then format C? then move the files over then format D?

I'd try this first as the drive you don't have connected right now won't boot and the error you received: can not read data, so anything you do with that drive won't do any good at this point.

Connect that drive only, startup by booting with your Windows CD.

Note To start the computer from the Windows XP CD-ROM, you must configure the basic input/output system (BIOS) of the computer to start from your CD-ROM.

To run the Recovery Console from the Windows XP startup disks or the Windows XP CD-ROM, follow these steps:
Insert the Windows XP startup disk into the floppy disk drive, or insert the Windows XP CD-ROM into the CD drive, and then restart the computer.

Click to select any options that are required to start the computer from the CD drive if you are prompted.
When the "Welcome to Setup" screen appears, press R to start the Recovery Console.
If you have a dual-boot or multiple-boot computer, select the installation that you must access from the Recovery Console.
When you are prompted, type the Administrator password. If the administrator password is blank, just press ENTER.
At the command prompt, type the appropriate commands to diagnose and repair your Windows XP installation.


At the windows prompt type in: Fixboot and tap enter key
Type in Exit and try to reboot normal.

If that doesn't work, go through the same steps but use: FIXMBR and tap enter key
Type in Exit and try to reboot normal.

Let me know if that worked

Didn't change anything Got to access c drive then hung up and lost access

Note To start the computer from the Windows XP CD-ROM, you must configure the basic input/output system (BIOS) of the computer to start from your CD-ROM.

To run the Recovery Console from the Windows XP startup disks or the Windows XP CD-ROM, follow these steps:
Insert the Windows XP startup disk into the floppy disk drive, or insert the Windows XP CD-ROM into the CD drive, and then restart the computer.

Click to select any options that are required to start the computer from the CD drive if you are prompted.
When the "Welcome to Setup" screen appears, press R to start the Recovery Console.
If you have a dual-boot or multiple-boot computer, select the installation that you must access from the Recovery Console.
When you are prompted, type the Administrator password. If the administrator password is blank, just press ENTER.
At the command prompt, type the appropriate commands to diagnose and repair your Windows XP installation.


At the windows prompt type in: chkdsk /r <–note the space it needs to be there and tap enter key

It completed and said "A error which cannot be recovered from" I think im just going to go with a clean format shitty deal, but i did manage to back up most if not all of my files =)

Yes that sucks….

Running from the D drive •Log on as Administrator or as a member of the Administrators group •Click on START and choose Control Panel •Click on Performance and Maintenance Note: If you do not see Performance and Maintenance listed, click on Switch to Category View on the left pane of the window. •Click on Administrative Tools •Double-click on Computer Management •Click once on Disk Management under Storage on the left •Scroll down the list of drives until you find the drive marked as (D:) •Right-click on the drive marked as (D:) and click on Change Drive Letter and Paths… •Click on the Change… button change it to C: •Click on OK and click Yes to the confirmation prompt

Did you want me to try this??