MBR-Alurec Rootkit Virus

Viruses and worms
1

Hi,

I keep getting a message from my Avast Internet Security that there is a PA MBR-Alureon K (R+K) (nan physical drive partition 2). I have tried to download all of the recommended OTL’s, but it won’t complete a scan for a log. I ran the Avast boot scan as recommended; it says it deletes it, but after I reboot, the message pops up again! The boot scan also said File C: Cab Archive is corrupt.

I have tried Antispyware and Malaware. Another popup window says: Avastsvc.exe application error. THe instruction at 0x64802e46 referenced memory at ox00000010. The memory could not be read.

Please help!
Heisone1

2

see if you are able to follow the guide here and attach the logs…not copy and paste
http://forum.avast.com/index.php?topic=53253.0

Essexboy is notified

3

Download aswMBR.exe ( 4.8mb ) to your desktop.
Double click the aswMBR.exe to run it Click the “Scan” button to start scan

http://dl.dropbox.com/u/73555776/aswMBRscan.png

On completion of the scan click save log, save it to your desktop and post in your next reply

http://dl.dropbox.com/u/73555776/aswMBRlog.png

4

Hi Essex,

Attached is the OTL.txt and OTL.extras

5

no…attached is only extra.txt

so you need to also attach OTL and aswMBR

6

At the moment the most important log will be the aswMBR one as it will tell me if it is active or not

7

Well I know I can’t get this running, unless it requires that AvastSvc.exe running, because apparently I have a similar MBR Rootkit on my system, but in turn it Malfunctions my Hard Drive and restarts it, like if the MBR force a Cache Rreset on the Hard Drive’s Circuit Board which is dangerous of such Rootkits.