aswMBR

Viruses and worms
1

Hello,

Could somebody help me with these results please, as I am not sure if aswMBR has detected anything? When I run Avast Full Scan it comes up with a rookit, but cannot remove it, so I am not sure if I am infected? Any help will be greatly appreciated, many thanks.

aswMBR version 1.0.1.2290 Copyright(c) 2014 AVAST Software
Run date: 2018-04-24 22:38:59

22:38:59.968 OS Version: Windows 6.2.9200
22:38:59.969 Number of processors: 2 586 0x3708
22:38:59.971 ComputerName: DELLPC UserName: Dell
22:39:12.203 Initialize success
22:39:12.316 VM: initialized successfully
22:39:12.321 VM: Intel CPU supported
22:40:20.288 VM: not used
22:40:28.435 AVAST engine defs: 18042404
22:40:28.650 Disk 0 (boot) \Device\Harddisk0\DR0 → \Device\0000002b
22:40:28.666 Disk 0 Vendor: TOSHIBA_MQ01ABF050 AM0P1D Size: 476940MB BusType: 11
22:40:28.791 Disk 0 MBR read successfully
22:40:28.791 Disk 0 MBR scan
22:40:28.791 Disk 0 Windows VISTA default MBR code
22:40:28.806 Disk 0 Partition 1 00 DE Dell Utility DELL 4.1 39 MB offset 63
22:40:28.816 Disk 0 Partition 2 80 (A) 27 Hidden NTFS WinRE NTFS 15360 MB offset 81920
22:40:28.847 Disk 0 Partition 3 00 07 HPFS/NTFS NTFS 461539 MB offset 31539200
22:40:28.863 Disk 0 scanning sectors +976771072
22:40:29.020 Disk 0 scanning C:\Windows\system32\drivers
22:40:45.059 Service scanning
22:41:21.863 Modules scanning
22:41:21.879 Disk 0 trace - called modules:
22:41:21.910 ntoskrnl.exe CLASSPNP.SYS disk.sys storport.sys halmacpi.dll storahci.sys
22:41:21.910 1 nt!IofCallDriver → \Device\Harddisk0\DR0[0x86951030]
22:41:21.926 3 CLASSPNP.SYS[8380463c] → nt!IofCallDriver → \Device\0000002b[0x8682bb10]
22:41:22.681 AVAST engine scan C:\Windows
22:41:25.058 AVAST engine scan C:\Windows\system32
22:45:10.603 AVAST engine scan C:\Windows\system32\drivers
22:45:36.453 AVAST engine scan C:\Users\Dell
23:10:07.139 AVAST engine scan C:\ProgramData
23:21:02.481 Disk 0 statistics 3734455/0/0 @ 0.85 MB/s
23:21:02.497 Scan finished successfully
23:24:35.552 Disk 0 MBR fix error
23:30:22.965 Disk 0 MBR fix error
23:30:24.887 Disk 0 MBR fix error
23:30:26.562 Disk 0 MBR fix error
23:30:32.067 Disk 0 (boot) \Device\Harddisk0\DR0 → \Device\0000002b
23:30:32.067 Disk 0 Vendor: TOSHIBA_MQ01ABF050 AM0P1D Size: 476940MB BusType: 11
23:30:32.463 Disk 0 MBR read successfully
23:30:32.479 Disk 0 MBR scan
23:30:32.494 Disk 0 Windows VISTA default MBR code
23:30:32.494 Disk 0 Partition 1 00 DE Dell Utility DELL 4.1 39 MB offset 63
23:30:32.537 Disk 0 Partition 2 80 (A) 27 Hidden NTFS WinRE NTFS 15360 MB offset 81920
23:30:32.574 Disk 0 Partition 3 00 07 HPFS/NTFS NTFS 461539 MB offset 31539200
23:30:32.652 Disk 0 scanning sectors +976771072
23:30:33.020 Disk 0 scanning C:\Windows\system32\drivers
23:31:16.289 Service scanning
23:31:53.681 Modules scanning
23:31:53.696 Disk 0 trace - called modules:
23:31:53.868 ntoskrnl.exe CLASSPNP.SYS disk.sys storport.sys halmacpi.dll storahci.sys dxgkrnl.sys igdkmd32.sys dxgmms1.sys watchdog.sys
23:31:53.868 1 nt!IofCallDriver → \Device\Harddisk0\DR0[0x86951030]
23:31:53.883 3 CLASSPNP.SYS[8380463c] → nt!IofCallDriver → \Device\0000002b[0x8682bb10]
23:31:55.180 AVAST engine scan C:
23:33:28.210 Disk 0 statistics 3866764/0/0 @ 0.83 MB/s
23:33:28.229 Scan stopped
23:33:31.445 Disk 0 (boot) \Device\Harddisk0\DR0 → \Device\0000002b
23:33:31.460 Disk 0 Vendor: TOSHIBA_MQ01ABF050 AM0P1D Size: 476940MB BusType: 11
23:33:32.242 Disk 0 MBR read successfully
23:33:32.257 Disk 0 MBR scan
23:33:32.257 Disk 0 Windows VISTA default MBR code
23:33:32.288 Disk 0 Partition 1 00 DE Dell Utility DELL 4.1 39 MB offset 63
23:33:32.320 Disk 0 Partition 2 80 (A) 27 Hidden NTFS WinRE NTFS 15360 MB offset 81920
23:33:32.367 Disk 0 Partition 3 00 07 HPFS/NTFS NTFS 461539 MB offset 31539200
23:33:32.773 Disk 0 scanning sectors +976771072
23:33:33.398 Disk 0 scanning C:\Windows\system32\drivers
23:34:36.399 Service scanning
23:35:20.945 Modules scanning
23:35:20.945 Disk 0 trace - called modules:
23:35:20.987 ntoskrnl.exe CLASSPNP.SYS disk.sys storport.sys halmacpi.dll storahci.sys
23:35:20.987 1 nt!IofCallDriver → \Device\Harddisk0\DR0[0x86951030]
23:35:20.987 3 CLASSPNP.SYS[8380463c] → nt!IofCallDriver → \Device\0000002b[0x8682bb10]
23:35:25.779 AVAST engine scan C:\Windows
23:36:20.352 AVAST engine scan C:\Windows\system32
23:53:02.216 AVAST engine scan C:\Windows\system32\drivers
23:54:48.569 AVAST engine scan C:\Users\Dell
01:15:45.739 AVAST engine scan C:\ProgramData
01:36:24.496 Disk 0 statistics 7602576/0/0 @ 0.40 MB/s
01:36:24.543 Scan finished successfully
02:06:55.182 Disk 0 MBR has been saved successfully to “C:\Users\Dell\Desktop\MBR.dat”
02:06:55.305 The log file has been saved successfully to “C:\Users\Dell\Desktop\aswMBR.txt”

2
so I am not sure if I am infected?
instructions >> https://forum.avast.com/index.php?topic=194892.0
3

Thank you for the link but it says “Do NOT post logs or ask for help here
To get assistance create a topic in the Virus and Worms forum”…am I in the wrong forum?

4
Thank you for the link but it says "Do NOT post logs or ask for help here
Meaning not in that topic as it is only for instuctions
am I in the wrong forum?
No .... and you use this topic as you have already started
5

Where should I post it then to get some help?

6

Right here.

7

Ok…any help with the results will be appreciated, thanks.

8

Where are the requested logs?

9

aswMBR version 1.0.1.2290 Copyright(c) 2014 AVAST Software
Run date: 2018-04-24 22:38:59

22:38:59.968 OS Version: Windows 6.2.9200
22:38:59.969 Number of processors: 2 586 0x3708
22:38:59.971 ComputerName: DELLPC UserName: Dell
22:39:12.203 Initialize success
22:39:12.316 VM: initialized successfully
22:39:12.321 VM: Intel CPU supported
22:40:20.288 VM: not used
22:40:28.435 AVAST engine defs: 18042404
22:40:28.650 Disk 0 (boot) \Device\Harddisk0\DR0 → \Device\0000002b
22:40:28.666 Disk 0 Vendor: TOSHIBA_MQ01ABF050 AM0P1D Size: 476940MB BusType: 11
22:40:28.791 Disk 0 MBR read successfully
22:40:28.791 Disk 0 MBR scan
22:40:28.791 Disk 0 Windows VISTA default MBR code
22:40:28.806 Disk 0 Partition 1 00 DE Dell Utility DELL 4.1 39 MB offset 63
22:40:28.816 Disk 0 Partition 2 80 (A) 27 Hidden NTFS WinRE NTFS 15360 MB offset 81920
22:40:28.847 Disk 0 Partition 3 00 07 HPFS/NTFS NTFS 461539 MB offset 31539200
22:40:28.863 Disk 0 scanning sectors +976771072
22:40:29.020 Disk 0 scanning C:\Windows\system32\drivers
22:40:45.059 Service scanning
22:41:21.863 Modules scanning
22:41:21.879 Disk 0 trace - called modules:
22:41:21.910 ntoskrnl.exe CLASSPNP.SYS disk.sys storport.sys halmacpi.dll storahci.sys
22:41:21.910 1 nt!IofCallDriver → \Device\Harddisk0\DR0[0x86951030]
22:41:21.926 3 CLASSPNP.SYS[8380463c] → nt!IofCallDriver → \Device\0000002b[0x8682bb10]
22:41:22.681 AVAST engine scan C:\Windows
22:41:25.058 AVAST engine scan C:\Windows\system32
22:45:10.603 AVAST engine scan C:\Windows\system32\drivers
22:45:36.453 AVAST engine scan C:\Users\Dell
23:10:07.139 AVAST engine scan C:\ProgramData
23:21:02.481 Disk 0 statistics 3734455/0/0 @ 0.85 MB/s
23:21:02.497 Scan finished successfully
23:24:35.552 Disk 0 MBR fix error
23:30:22.965 Disk 0 MBR fix error
23:30:24.887 Disk 0 MBR fix error
23:30:26.562 Disk 0 MBR fix error
23:30:32.067 Disk 0 (boot) \Device\Harddisk0\DR0 → \Device\0000002b
23:30:32.067 Disk 0 Vendor: TOSHIBA_MQ01ABF050 AM0P1D Size: 476940MB BusType: 11
23:30:32.463 Disk 0 MBR read successfully
23:30:32.479 Disk 0 MBR scan
23:30:32.494 Disk 0 Windows VISTA default MBR code
23:30:32.494 Disk 0 Partition 1 00 DE Dell Utility DELL 4.1 39 MB offset 63
23:30:32.537 Disk 0 Partition 2 80 (A) 27 Hidden NTFS WinRE NTFS 15360 MB offset 81920
23:30:32.574 Disk 0 Partition 3 00 07 HPFS/NTFS NTFS 461539 MB offset 31539200
23:30:32.652 Disk 0 scanning sectors +976771072
23:30:33.020 Disk 0 scanning C:\Windows\system32\drivers
23:31:16.289 Service scanning
23:31:53.681 Modules scanning
23:31:53.696 Disk 0 trace - called modules:
23:31:53.868 ntoskrnl.exe CLASSPNP.SYS disk.sys storport.sys halmacpi.dll storahci.sys dxgkrnl.sys igdkmd32.sys dxgmms1.sys watchdog.sys
23:31:53.868 1 nt!IofCallDriver → \Device\Harddisk0\DR0[0x86951030]
23:31:53.883 3 CLASSPNP.SYS[8380463c] → nt!IofCallDriver → \Device\0000002b[0x8682bb10]
23:31:55.180 AVAST engine scan C:
23:33:28.210 Disk 0 statistics 3866764/0/0 @ 0.83 MB/s
23:33:28.229 Scan stopped
23:33:31.445 Disk 0 (boot) \Device\Harddisk0\DR0 → \Device\0000002b
23:33:31.460 Disk 0 Vendor: TOSHIBA_MQ01ABF050 AM0P1D Size: 476940MB BusType: 11
23:33:32.242 Disk 0 MBR read successfully
23:33:32.257 Disk 0 MBR scan
23:33:32.257 Disk 0 Windows VISTA default MBR code
23:33:32.288 Disk 0 Partition 1 00 DE Dell Utility DELL 4.1 39 MB offset 63
23:33:32.320 Disk 0 Partition 2 80 (A) 27 Hidden NTFS WinRE NTFS 15360 MB offset 81920
23:33:32.367 Disk 0 Partition 3 00 07 HPFS/NTFS NTFS 461539 MB offset 31539200
23:33:32.773 Disk 0 scanning sectors +976771072
23:33:33.398 Disk 0 scanning C:\Windows\system32\drivers
23:34:36.399 Service scanning
23:35:20.945 Modules scanning
23:35:20.945 Disk 0 trace - called modules:
23:35:20.987 ntoskrnl.exe CLASSPNP.SYS disk.sys storport.sys halmacpi.dll storahci.sys
23:35:20.987 1 nt!IofCallDriver → \Device\Harddisk0\DR0[0x86951030]
23:35:20.987 3 CLASSPNP.SYS[8380463c] → nt!IofCallDriver → \Device\0000002b[0x8682bb10]
23:35:25.779 AVAST engine scan C:\Windows
23:36:20.352 AVAST engine scan C:\Windows\system32
23:53:02.216 AVAST engine scan C:\Windows\system32\drivers
23:54:48.569 AVAST engine scan C:\Users\Dell
01:15:45.739 AVAST engine scan C:\ProgramData
01:36:24.496 Disk 0 statistics 7602576/0/0 @ 0.40 MB/s
01:36:24.543 Scan finished successfully
02:06:55.182 Disk 0 MBR has been saved successfully to “C:\Users\Dell\Desktop\MBR.dat”
02:06:55.305 The log file has been saved successfully to “C:\Users\Dell\Desktop\aswMBR.txt”

Sorry, I thought they were visible in the first post!

10
Sorry, I thought they were visible in the first post!
yes it is ... but that is NOT the requested logs

I gave link to instructions in post above
read it all and run the listed programs and attach logs