Author Topic: Help! avast! detected MBR:\\.\PHYSICALDRIVE1 Threat Rootkit: hidden boot-sector  (Read 6978 times)

0 Members and 1 Guest are viewing this topic.

Ralff87

  • Guest
avast! detected yesterday malware on my computer: "MBR:\\.\PHYSICALDRIVE1 - Threat Rootkit: hidden boot-sector"
I couldn't remove it with avast! And it kept rebooting with blue screen of death. I pulled out the internet cable and made a reboot scan with avast! where nothing was detected.

I installed and updated(quickly plugged in the internet cable while updating and pulling it out when done) MBAM and ran a "Perform a quick scan" which detected nothing. (log attached)
I ran a scan with aswMBR which detected something. (log attached)

Please help, thanks!
« Last Edit: April 09, 2011, 09:48:04 AM by Ralff87 »

Ralff87

  • Guest
I have attached an OTS log following the instructions here http://forum.avast.com/index.php?topic=53253.0 In ANSI.
I hope this helps in solving my problem.

Thanks.
« Last Edit: April 09, 2011, 06:52:36 PM by Ralff87 »

Offline Left123

  • There Is No Patch For Human Stupidity.
  • Avast Evangelist
  • Advanced Poster
  • ***
  • Posts: 1048
  • Proud Community Member&Helper.
scan again(with aswMBR), then click "FIX" and reboot
after reboot scan again, click save log and post it here
AMD Athlon(tm) X2 Dual-Core Processor 4200+ - 2.20 GHz,3,00 GB RAM -
Browser:Mozilla Firefox +WOT - SoftWare:CCleaner - Windows 7 32 bit
No Anti-Virus

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
That looks good - just the TDL4 to kill, as left said but with pictures

Re-Run aswMBR

Click Scan

On completion of the scan

Click the   Fix Button 





Save the log as before and post in your next reply

Ralff87

  • Guest
I have now scanned with aswMBR, then I clicked FIX and rebooted.
After reboot I scanned once more and saved the log which is attached.

Offline Left123

  • There Is No Patch For Human Stupidity.
  • Avast Evangelist
  • Advanced Poster
  • ***
  • Posts: 1048
  • Proud Community Member&Helper.
Looks clean.What problems remain?Have you got any other problems?
AMD Athlon(tm) X2 Dual-Core Processor 4200+ - 2.20 GHz,3,00 GB RAM -
Browser:Mozilla Firefox +WOT - SoftWare:CCleaner - Windows 7 32 bit
No Anti-Virus

Ralff87

  • Guest
I've had it up and running for quite a bit now and made a full system scan in avast!, where nothing was found. I am very happy and thank you all very very much I am truly grateful for all your help.