Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Root.Mebroot & Repairing MBR


  • Please log in to reply
2 replies to this topic

#1 Olias

Olias

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:07:25 AM

Posted 30 March 2010 - 02:14 AM

Hello, all. I hope I can get some advice. My HP m7674n PC running Windows XP SP3 appears to be infected with the Root.Mebroot trojan, according to Norton Security Suite. I have always maintained tight security, I run multiple scans from time to time, and I never saw any evidence of this infection before. But when I recently changed from McAfee to Norton the new program began flagging this virus. While Norton appears able to quarantine this infection, it reappears on each re-boot and I would like to rid myself of it once and for all if possible. All my research seems to indicate that I need to repair the MBR in which this trojan resides to completely clean my system.

Because I utilize an outboard back-up drive with updated mirror images of my system drive as well as full file backups, I deleted my recovery partition long ago. I do, however, still have my original recovery disks which I burned when I first purchased my PC.

Could I utilize the secondary drive on this system (which is mostly empty space anyway) to install a full OEM-level recovery on that drive using the recovery disks and then somehow use the original MBR from there to repair the corrupt MBR on my main system drive?

Thanks in advance for your help and guidance.

Olias

BC AdBot (Login to Remove)

 


#2 techextreme

techextreme

    Bleepin Tech


  • Members
  • 2,125 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Pittsburgh, PA
  • Local time:08:25 AM

Posted 30 March 2010 - 09:02 AM

You have a serious rootkit and at this point, I think this one is best left to the experts, so I'm going to refer you to the Virus, Trojan, Spyware, and Malware Removal Logs Forum.

Please read the Preparation Guide For Use Before Using Malware Removal Tools and Requesting Help in cleaning your computer. Once complete, post a link back to this forum so the HJT team knows what we have tried.

Please be patient as the HJT team is quite busy sometimes and it may take a day or even a few for someone to pickup your log but someone will get back to you.
Techextreme

"Admire those who attempt great things, even though they fail."

-- Seneca

#3 Olias

Olias
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:07:25 AM

Posted 30 March 2010 - 10:29 PM

Thank you for your swift reply. I will prepare my information and post a topic in the other forum in the next day or so.

Olias




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users