Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Ran Rogue Killer and was given a weird message about my partitions.


  • Please log in to reply
5 replies to this topic

#1 Synthesis

Synthesis

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:01:06 AM

Posted 20 November 2013 - 05:13 AM

Hello all. I ran Rogue Killer as part of a standard cleaning, and although it seemed everything was normal, I was greeted by this message in my MBR tab.
 

--- User ---
[MBR] 7960035b193c869adbb1c4ca57bd940c
[BSP] a980723a192ed402c6e822084466657a : Windows 7/8 MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 100 Mo
1 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 206848 | Size: 953767 Mo
 
33  c0  8e  d0  bc  00  7c  8e  c0  8e  d8  be  00  7c  bf  00  06  
b9  00  02  fc  f3  a4  50  68  1c  06  cb  fb  b9  04  00  bd  be  
07  80  7e  00  00  7c  0b  0f  85  0e  01  83  c5  10  e2  f1  cd  
18  88  56  00  55  c6  46  11  05  c6  46  10  00  b4  41  bb  aa  
55  cd  13  5d  72  0f  81  fb  55  aa  75  09  f7  c1  01  00  74  
03  fe  46  10  66  60  80  7e  10  00  74  26  66  68  00  00  00  
00  66  ff  76  08  68  00  00  68  00  7c  68  01  00  68  10  00  
b4  42  8a  56  00  8b  f4  cd  13  9f  83  c4  10  9e  eb  14  b8  
01  02  bb  00  7c  8a  56  00  8a  76  01  8a  4e  02  8a  6e  03  
cd  13  66  61  73  1c  fe  4e  11  75  0c  80  7e  00  80  0f  84  
8a  00  b2  80  eb  84  55  32  e4  8a  56  00  cd  13  5d  eb  9e  
81  3e  fe  7d  55  aa  75  6e  ff  76  00  e8  8d  00  75  17  fa  
b0  d1  e6  64  e8  83  00  b0  df  e6  60  e8  7c  00  b0  ff  e6  
64  e8  75  00  fb  b8  00  bb  cd  1a  66  23  c0  75  3b  66  81  
fb  54  43  50  41  75  32  81  f9  02  01  72  2c  66  68  07  bb  
00  00  66  68  00  02  00  00  66  68  08  00  00  00  66  53  66  
53  66  55  66  68  00  00  00  00  66  68  00  7c  00  00  66  61  
68  00  00  07  cd  1a  5a  32  f6  ea  00  7c  00  00  cd  18  a0  
b7  07  eb  08  a0  b6  07  eb  03  a0  b5  07  32  e4  05  00  07  
8b  f0  ac  3c  00  74  09  bb  07  00  b4  0e  cd  10  eb  f2  f4  
eb  fd  2b  c9  e4  64  eb  00  24  02  e0  f8  24  02  c3  49  6e  
76  61  6c  69  64  20  70  61  72  74  69  74  69  6f  6e  20  74  
61  62  6c  65  00  45  72  72  6f  72  20  6c  6f  61  64  69  6e  
67  20  6f  70  65  72  61  74  69  6e  67  20  73  79  73  74  65  
6d  00  4d  69  73  73  69  6e  67  20  6f  70  65  72  61  74  69  
6e  67  20  73  79  73  74  65  6d  00  00  00  63  7b  9a  db  fa  
bf  0f  00  00  
 
3.....|......|.........Ph...........~..|.............V.U.F...F...A..U..]r...U.u.....t..F.f`.~..t&fh....f.v.h..h.|h..h...B.V.................|.V..v..N..n...fas..N.u..~..........U2..V...]...>.}U.un.v....u.....d......`.|....d.u.......f#.u;f..TCPAu2....r,fh....fh....fh....fSfSfUfh....fh.|..fah.....Z2...|.................2.......<.t.............+..d..$...$..Invalid partition table.Error loading operating system.Missing operating system...c{.......
 
User = LL1 ... OK!
User = LL2 ... OK!


My computer is working fine and boots without a hitch, which is why this message is so troubling to me. Any insight as to what this is? Should I make a backup of my MBR in case it gets work?


BC AdBot (Login to Remove)

 


#2 Union_Thug

Union_Thug

    Bleeps with the fishes...


  • Members
  • 2,355 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:is everything
  • Local time:05:06 AM

Posted 20 November 2013 - 05:31 AM

I just ran RK  on my clean as a whistle (I am ABSOLUTELY sure of this!) Win 7 system & got the same cryptic message...dunno what it means? :unsure:

 

¤¤¤ MBR Check: ¤¤¤

+++++ PhysicalDrive0: WDC WD2500BPVT-75JJ5T0 +++++
--- User ---
[MBR] 61e3e0c53110d0c209c2df5e91334b90
[BSP] cc5eddf0ae72007067c2e49305a21417 : Windows 7/8 MBR Code
Partition table:
0 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 182053 Mo
1 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 488192000 | Size: 99 Mo

...

3.....|......|.........Ph...........~..|.............V.U.F...F...A..U..]r...U.u.....t..F.f`.~..t&fh....f.v.h..h.|h..h...B.V.................|.V..v..N..n...fas..N.u..~..........U2..V...]...>.}U.un.v....u.....d......`.|....d.u.......f#.u;f..TCPAu2....r,fh....fh....fh....fSfSfUfh....fh.|..fah.....Z2...|.................2.......<.t.............+..d..$...$..Invalid partition table.Error loading operating system.Missing operating system...c{.-.v...

User = LL1 ... OK!
User = LL2 ... OK!



#3 Synthesis

Synthesis
  • Topic Starter

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:01:06 AM

Posted 20 November 2013 - 05:39 AM

I just ran RK  on my clean as a whistle (I am ABSOLUTELY sure of this!) Win 7 system & got the same cryptic message...dunno what it means? :unsure:

 

¤¤¤ MBR Check: ¤¤¤

+++++ PhysicalDrive0: WDC WD2500BPVT-75JJ5T0 +++++
--- User ---
[MBR] 61e3e0c53110d0c209c2df5e91334b90
[BSP] cc5eddf0ae72007067c2e49305a21417 : Windows 7/8 MBR Code
Partition table:
0 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 182053 Mo
1 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 488192000 | Size: 99 Mo

...

3.....|......|.........Ph...........~..|.............V.U.F...F...A..U..]r...U.u.....t..F.f`.~..t&fh....f.v.h..h.|h..h...B.V.................|.V..v..N..n...fas..N.u..~..........U2..V...]...>.}U.un.v....u.....d......`.|....d.u.......f#.u;f..TCPAu2....r,fh....fh....fh....fSfSfUfh....fh.|..fah.....Z2...|.................2.......<.t.............+..d..$...$..Invalid partition table.Error loading operating system.Missing operating system...c{.-.v...

User = LL1 ... OK!
User = LL2 ... OK!

Quite odd! I'm fairly certain my computer is also spotless, I've had a fun day of managing all the computers on my network after a ZeroAccess Virus scare on one of them. 
I'm tempted to make a backup of my MBR, but honestly it doesn't seem like a top priority since everything else is running fine.
Thanks for your reply though! It gives me some comfort to know someone else has the same issue without facing and adverse effects! 



#4 cryptodan

cryptodan

    Bleepin Madman


  • Members
  • 21,868 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Catonsville, Md
  • Local time:09:06 AM

Posted 20 November 2013 - 06:49 AM

I am sure if you put the following hex into a hex editor and converted it to WORD you would get the stuff in the second code block.
 
33  c0  8e  d0  bc  00  7c  8e  c0  8e  d8  be  00  7c  bf  00  06  
b9  00  02  fc  f3  a4  50  68  1c  06  cb  fb  b9  04  00  bd  be  
07  80  7e  00  00  7c  0b  0f  85  0e  01  83  c5  10  e2  f1  cd  
18  88  56  00  55  c6  46  11  05  c6  46  10  00  b4  41  bb  aa  
55  cd  13  5d  72  0f  81  fb  55  aa  75  09  f7  c1  01  00  74  
03  fe  46  10  66  60  80  7e  10  00  74  26  66  68  00  00  00  
00  66  ff  76  08  68  00  00  68  00  7c  68  01  00  68  10  00  
b4  42  8a  56  00  8b  f4  cd  13  9f  83  c4  10  9e  eb  14  b8  
01  02  bb  00  7c  8a  56  00  8a  76  01  8a  4e  02  8a  6e  03  
cd  13  66  61  73  1c  fe  4e  11  75  0c  80  7e  00  80  0f  84  
8a  00  b2  80  eb  84  55  32  e4  8a  56  00  cd  13  5d  eb  9e  
81  3e  fe  7d  55  aa  75  6e  ff  76  00  e8  8d  00  75  17  fa  
b0  d1  e6  64  e8  83  00  b0  df  e6  60  e8  7c  00  b0  ff  e6  
64  e8  75  00  fb  b8  00  bb  cd  1a  66  23  c0  75  3b  66  81  
fb  54  43  50  41  75  32  81  f9  02  01  72  2c  66  68  07  bb  
00  00  66  68  00  02  00  00  66  68  08  00  00  00  66  53  66  
53  66  55  66  68  00  00  00  00  66  68  00  7c  00  00  66  61  
68  00  00  07  cd  1a  5a  32  f6  ea  00  7c  00  00  cd  18  a0  
b7  07  eb  08  a0  b6  07  eb  03  a0  b5  07  32  e4  05  00  07  
8b  f0  ac  3c  00  74  09  bb  07  00  b4  0e  cd  10  eb  f2  f4  
eb  fd  2b  c9  e4  64  eb  00  24  02  e0  f8  24  02  c3  49  6e  
76  61  6c  69  64  20  70  61  72  74  69  74  69  6f  6e  20  74  
61  62  6c  65  00  45  72  72  6f  72  20  6c  6f  61  64  69  6e  
67  20  6f  70  65  72  61  74  69  6e  67  20  73  79  73  74  65  
6d  00  4d  69  73  73  69  6e  67  20  6f  70  65  72  61  74  69  
6e  67  20  73  79  73  74  65  6d  00  00  00  63  7b  9a  db  fa  
bf  0f  00  00  
3.....|......|.........Ph...........~..|.............V.U.F...F...A..U..]r...U.u.....t..F.f`.~..t&fh....f.v.h..h.|h..h...B.V.................|.V..v..N..n...fas..N.u..~..........U2..V...]...>.}U.un.v....u.....d......`.|....d.u.......f#.u;f..TCPAu2....r,fh....fh....fh....fSfSfUfh....fh.|..fah.....Z2...|.................2.......<.t.............+..d..$...$..Invalid partition table.Error loading operating system.Missing operating system...c{.......
Go here http://www.string-functions.com/hex-string.aspx and copy the HEX to the first block and then hit convert.

Edited by cryptodan, 20 November 2013 - 06:53 AM.


#5 Synthesis

Synthesis
  • Topic Starter

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:01:06 AM

Posted 20 November 2013 - 07:50 AM

I am sure if you put the following hex into a hex editor and converted it to WORD you would get the stuff in the second code block.
 

33  c0  8e  d0  bc  00  7c  8e  c0  8e  d8  be  00  7c  bf  00  06  
b9  00  02  fc  f3  a4  50  68  1c  06  cb  fb  b9  04  00  bd  be  
07  80  7e  00  00  7c  0b  0f  85  0e  01  83  c5  10  e2  f1  cd  
18  88  56  00  55  c6  46  11  05  c6  46  10  00  b4  41  bb  aa  
55  cd  13  5d  72  0f  81  fb  55  aa  75  09  f7  c1  01  00  74  
03  fe  46  10  66  60  80  7e  10  00  74  26  66  68  00  00  00  
00  66  ff  76  08  68  00  00  68  00  7c  68  01  00  68  10  00  
b4  42  8a  56  00  8b  f4  cd  13  9f  83  c4  10  9e  eb  14  b8  
01  02  bb  00  7c  8a  56  00  8a  76  01  8a  4e  02  8a  6e  03  
cd  13  66  61  73  1c  fe  4e  11  75  0c  80  7e  00  80  0f  84  
8a  00  b2  80  eb  84  55  32  e4  8a  56  00  cd  13  5d  eb  9e  
81  3e  fe  7d  55  aa  75  6e  ff  76  00  e8  8d  00  75  17  fa  
b0  d1  e6  64  e8  83  00  b0  df  e6  60  e8  7c  00  b0  ff  e6  
64  e8  75  00  fb  b8  00  bb  cd  1a  66  23  c0  75  3b  66  81  
fb  54  43  50  41  75  32  81  f9  02  01  72  2c  66  68  07  bb  
00  00  66  68  00  02  00  00  66  68  08  00  00  00  66  53  66  
53  66  55  66  68  00  00  00  00  66  68  00  7c  00  00  66  61  
68  00  00  07  cd  1a  5a  32  f6  ea  00  7c  00  00  cd  18  a0  
b7  07  eb  08  a0  b6  07  eb  03  a0  b5  07  32  e4  05  00  07  
8b  f0  ac  3c  00  74  09  bb  07  00  b4  0e  cd  10  eb  f2  f4  
eb  fd  2b  c9  e4  64  eb  00  24  02  e0  f8  24  02  c3  49  6e  
76  61  6c  69  64  20  70  61  72  74  69  74  69  6f  6e  20  74  
61  62  6c  65  00  45  72  72  6f  72  20  6c  6f  61  64  69  6e  
67  20  6f  70  65  72  61  74  69  6e  67  20  73  79  73  74  65  
6d  00  4d  69  73  73  69  6e  67  20  6f  70  65  72  61  74  69  
6e  67  20  73  79  73  74  65  6d  00  00  00  63  7b  9a  db  fa  
bf  0f  00  00  
3.....|......|.........Ph...........~..|.............V.U.F...F...A..U..]r...U.u.....t..F.f`.~..t&fh....f.v.h..h.|h..h...B.V.................|.V..v..N..n...fas..N.u..~..........U2..V...]...>.}U.un.v....u.....d......`.|....d.u.......f#.u;f..TCPAu2....r,fh....fh....fh....fSfSfUfh....fh.|..fah.....Z2...|.................2.......<.t.............+..d..$...$..Invalid partition table.Error loading operating system.Missing operating system...c{.......
Go here http://www.string-functions.com/hex-string.aspx and copy the HEX to the first block and then hit convert.

 

Hey, good call! I did that and then got this garbled block of text.

3ÀŽÐ¼|ŽÀŽØ¾|¿?¹üó¤PhËû¹½¾?€~|…ƒÅâñÍ?ˆVUÆFÆF´A»ª?UÍ]rûUªu ÷Át?þFf`€~t&fh?fÿvhh|hh?´BŠV‹ôÍŸƒÄžë¸?»|ŠVŠvŠNŠn?ÍfasþNu€~€„?Š²€ë„U2äŠVÍ]ëž?>þ}Uªunÿvèuú?°Ñæd胰ßæ`è|°ÿæ?dèuû¸»Íf#Àu;f?ûTCPAu2ùr,fh»?fhfhfSf?SfUfhfh|fa?hÍZ2öê|Í ?·ë ¶ë µ2ä?‹ð¬<t »´Íëòô?ëý+Éädë$àø$ÃIn?valid partition t?ableError loadin?g operating syste?mMissing operati?ng systemc{šÛú?¿

The important part being| ÃIn?valid partition t?ableError loadin?g operating syste?mMissing operati?ng system

It looks like it's just telling me what was listed a bit further down in the original post. Still slightly unsettling though.



#6 Union_Thug

Union_Thug

    Bleeps with the fishes...


  • Members
  • 2,355 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:is everything
  • Local time:05:06 AM

Posted 20 November 2013 - 08:34 AM

@cryptodan  TYVM, bookmarked your link.

 

@Synthesis: You're welcome, I'm pretty sure someone who is familiar/expert  with this tool will be along to explain what those messages are in 5....4....3....  :lol:

 

 

 






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users