All clean now. I didn't want to break the mirror because honestly, I don't trust the cheapo on board raid controller. I think that having the desktop mirrored with the crappy controller is worse than a standalone disk.
The infected machine wouldn't open task manager or let you run msconfig. I isntalled the latest version of lalwarebytes on another machine, renamed and copied the executable to a CD-R. Coped the exe from CD-R to the infected machine. Malware bytes then would run. I ran it three times. First time cleared it of 32 items (enough that I could update MB's definitions), ran it a second time and cleaned 10 more items. Then ran it a third time and it came up clean. No more symptoms yet. Bill Ben Scott wrote: > On Thu, Oct 8, 2009 at 2:35 PM, David W. McSpadden <[email protected]> wrote: > >>> You could pick one drive, clean that drive, reinsert that drive, and >>> tell the RAID implementation to re-mirror from that drive to the other >>> one. >>> >> But what you suggest is still getting the H1N1 into the second egg via the >> re-mirror process??? >> > > When it remirrors, it will overwrite every single block on the > second disk. If the master really is "clean", then the rebuilt mirror > is going to be clean, too. > > Someone's suggestion of: > > 1. Remove one mirror member, set aside > 2. Insert new disk, let it remirror to that > 3. Now attempt to clean > > would also work. If step 3 goes very wrong and trashes the system, > you can re-mirror from the offline member you made before hand. > > -- Ben > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ > ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
