Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: REDACTED on March 21, 2017, 12:22:07 AM

Title: Unknown MBR code in aswMBR
Post by: REDACTED on March 21, 2017, 12:22:07 AM

Hello. I ran a scan using aswMBR 1.0.1.2290, and I came across something which looked odd. Unknown MBR code.

I'll include the worrying parts of the log here:

23:58:46.485    Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\0000002c
23:58:46.486    Disk 0 Vendor: WDC_WD10EZEX-08WN4A0 01.01A01 Size: 953869MB BusType: 11
23:58:46.490    Disk 1  \Device\Harddisk1\DR1 -> \Device\0000002d
23:58:46.492    Disk 1 Vendor: ST1000DM003-1CH162 CC47 Size: 953869MB BusType: 11
23:58:46.518    Disk 0 MBR read successfully
23:58:46.520    Disk 0 MBR scan
23:58:46.533    Disk 0 unknown MBR code
23:58:46.538    Disk 0 Partition 1 80 (A) 07      HPFS/NTFS NTFS          100 MB offset 2048
23:58:46.563    Disk 0 Partition 2 00     07      HPFS/NTFS            953317 MB offset 206848
23:58:46.599    Disk 0 Partition 3 00     27 Hidden NTFS WinRE NTFS          450 MB offset 1952600064

Is that something to be worried about perhaps? I should add that my computer is encrypted, if that might be a relevant aspect here.

Title: Re: Unknown MBR code in aswMBR
Post by: DavidR on March 21, 2017, 12:58:54 AM

What made you feel it necessary to run aswMBR ?
The reason I ask is if there are issues that made you go down this route, you may need to run some more analysis tools under the guidance of  qualified malware removal specialist and in the Viruses and Worms sub-forum.

There are occasions where an unrecognised MBR isn't unusual, this could be a manufacturer having a custom MBR.

An unknown MBR doesn't necessarily mean it is an infected MBR.