Adlice forum

General Category => Malware removal help => Topic started by: leftisthominid on November 03, 2015, 05:11:33 am

Title: [BSP] 1268b7e306b0d2f18181ecb97eb747e3 : Windows Vista/7/8|VT.Unknown MBR Code
Post by: leftisthominid on November 03, 2015, 05:11:33 am
I was suggested to used RK (http://answers.microsoft.com/en-us/protect/forum/protect_other-protect_scanning/what-is-adwarewin32adwrapperdb/15c41048-33f6-4c8b-bf8e-b5a4cf86b0af?tm=1446429913637)
It found Proc.Injected in WWAHost.exe

Kaspersky, MBAM, and TDSSKiller all say I am clean. Is this a a false positive?

I also noticed [BSP] 1268b7e306b0d2f18181ecb97eb747e3 : Windows Vista/7/8|VT.Unknown MBR Code

What does this mean?
Title: Re: [BSP] 1268b7e306b0d2f18181ecb97eb747e3 : Windows Vista/7/8|VT.Unknown MBR Code
Post by: Curson on November 03, 2015, 03:04:55 pm
Hi leftisthominid,

The report you posted was generated with the 32 bits version of RogueKiller .
Please download RogueKiller (64 bits version) (http://www.adlice.com//?smd_process_download=1&download_id=2181), redo a full scan and post the report obtained in your next reply.

Regards.
Title: Re: [BSP] 1268b7e306b0d2f18181ecb97eb747e3 : Windows Vista/7/8|VT.Unknown MBR Code
Post by: leftisthominid on November 03, 2015, 04:07:16 pm
Quote
+++++ PhysicalDrive0:  +++++
--- User ---
[MBR] fb9b252aed9f399781f7ee99c9170a87
[BSP] 1268b7e306b0d2f18181ecb97eb747e3 : Windows Vista/7/8|VT.Unknown MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x7) [VISIBLE] Offset (sectors): 2048 | Size: 350 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
1 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 718848 | Size: 953517 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
User = LL1 ... OK
User = LL2 ... OK

Does this mean my MBR is clean?
Title: Re: [BSP] 1268b7e306b0d2f18181ecb97eb747e3 : Windows Vista/7/8|VT.Unknown MBR Code
Post by: Curson on November 03, 2015, 07:54:29 pm
Hi leftisthominid,

Yes, your computer is clean.

Regards.