Disk 0 Master Boot Record, Alueron-MBR [Rtk]

computer noob here… The main problem with the virus is when i open up a browser and type in a website it immediately shuts down. I read some other threads with the same virus and tried to treat it myself. (probably ended up making it worse) Already have aswmbr, tdskiller and combofix installed on the desktop. This computer is also hook up to a LAN 5 other computers attached to the network. Don’t know if that matters but this is the only computer affected from the virus. please help by telling me what to run and which logs to be posted for the masters to analyze. thanks.

here is aswmbr log

aswMBR version 0.9.9.1665 Copyright(c) 2011 AVAST Software
Run date: 2012-03-29 14:25:37

14:25:37.781 OS Version: Windows 5.1.2600 Service Pack 3
14:25:37.781 Number of processors: 2 586 0x1706
14:25:37.781 ComputerName: TIM UserName:
14:25:38.109 Initialze error C000010E - driver not loaded
14:25:38.125 write error “aswCmnB.dll”. The process cannot access the file because it is being used by another process.
14:25:40.765 AVAST engine defs: 12032900
14:25:43.250 Service scanning
14:25:57.046 Modules scanning
14:25:57.046 Disk 0 trace - called modules:
14:25:57.046
14:25:57.484 AVAST engine scan C:\WINDOWS
14:26:10.562 AVAST engine scan C:\WINDOWS\system32
14:28:00.234 AVAST engine scan C:\WINDOWS\system32\drivers
14:28:09.265 AVAST engine scan C:\Documents and Settings\Tim Jones
14:30:37.671 AVAST engine scan C:\Documents and Settings\All Users
14:31:09.046 Scan finished successfully
14:31:25.343 The log file has been saved successfully to “C:\Documents and Settings\Tim Jones\Desktop\aswMBR.txt”

http://www.text-upload.com/read.php?id=323800&c=2950982

tdsskiller log here

Follow the guide here and attach the OTL log
http://forum.avast.com/index.php?topic=53253.0

if you have a Combofix log…attach that also

here is the combofix log, otl next.

otl logs

Could you retry aswMBR please as it failed to run properly, also what are the current problems ?

the main problem is when i open up internet explorer and type in a website, it automatically shuts down internet explorer, plus i am unable to uninstall webroot and avast which are out of date, I want to then update with the newest avast suscription which i have…aswmbr log coming soon… thanks for your time…

OK lets see what aswMBR reveals - as it is well hidden at the moment

aswmbr log

What is the problem with Avast i.e will it not update or anything ?

Once this programme has run could you upload the zip file to Mediafire or other online hosting sitte and post the sharing link

Download AVPTool from Here to your desktop

Run the programme you have just downloaded to your desktop (it will be randomly named )

First we will run a virus scan

Click the cog in the upper right

http://i1224.photobucket.com/albums/ee362/Essexboy3/AVP%20shots/AVPfront.gif

Select down to and including your main drive, once done select the Automatic scan tab and press Start Scan

http://i1224.photobucket.com/albums/ee362/Essexboy3/AVP%20shots/avpsettings.gif

Allow AVP to delete all infections found
Once it has finished select report tab (last tab)
Select Detected threats report from the left and press Save button
Save it to your desktop and attach to your next post

Now the Analysis

Rerun AVP and select the Manual Disinfection tab and press Start Gathering System Information

http://i1224.photobucket.com/albums/ee362/Essexboy3/AVP%20shots/AVPAnalysis.gif

On completion click the link to locate the zip file to upload and attach to your next post

http://i1224.photobucket.com/albums/ee362/Essexboy3/AVP%20shots/AVPZiplocation.gif

Yea it won’t let me update avast at all, it is an old version that is expired. It could work if i had the license key but the new product just gave me a licensing file to mount on the avast product and with the old verison there is no where to mount it. The licensing file doesn’t have a licensing key listed in it

OK once AVP has run we will uninstall all traces of Avast and then reinstall a spanking new version ;D

didn’t detect any threats so that report is not included… here is the other report you requested

http://www.filefactory.com/file/5dhrd01b90cd/n/avptool_sysinfo.zip

Nothing showing there that is suspicious

Download Avast 7 to your desktop http://files.avast.com/iavs5x/avast_free_antivirus_setup.exe
Download aswClear to your desktop http://files.avast.com/files/eng/aswclear.exe

First try to uninstall Avast via Add/remove
If that fails or succeeds we will now reboot to safe mode

From safe mode run aswClear
Select in the drop down box version 4
Run aswclear

Repeat then for versions 5, 6, 7

Reboot to normmal mode and install Avast

Let me know how the computer is behaving on completion

avast was unable to unistall via add/remove programs but was able to with aswclear in safemode, downloaded avast onto the computer with google chrome included, everything is working good there (google chrome included) the only other thing is internet explorer is not working properly and i still have webroot on the computer (old version) that i want to remove but can’t error message comes up that says Message file “C:/Program Files/Webroot/WebrootSecurity/unins002.msg” is missing. Please correct the problem or obtain a new copy of the program. The back slasheres are the other way, don’t know how to type it on the laptop im using. Any idea how to unistall webroot? I think that is why internet explorer isn’t working.

The simplest way would be to re-install webroot and then immediately uninstall

Let me know if that works, also what are the problems with IE ?

ie goes to the homepage but whenever i type in another web site in the address bar and try to go to it, ie just shuts down and exits out.

Download and install IE8 http://www.microsoft.com/download/en/details.aspx?id=43

Let me know if that cures the problem