MBR detected.

I installed a program named “Spyhunter” suspecting their to be a virus on my computer, Avast could not find any viruses, it reported finding a MBR bootkit, I don’t know whether this was to make me buy the software or a legitimate result, I did a scan with aswmbr.exe and came up with this log. However when clicking “fix mbr” it just gives disk 0 mbr fix error

The log is here:

aswMBR version 0.9.9.1771 Copyright(c) 2011 AVAST Software
Run date: 2014-05-03 11:05:10

11:05:10.800 OS Version: Windows x64 6.2.9200
11:05:10.800 Number of processors: 8 586 0x3A09
11:05:10.801 ComputerName: ISISARIEY UserName: ****
11:05:10.803 Initialze error 1
11:05:13.630 AVAST engine defs: 14050300
11:05:16.824 Disk 0 (boot) \Device\Harddisk0\DR0 → \Device\00000031
11:05:16.827 Disk 0 Vendor: Size: 0MB BusType: 0
11:05:16.870 Disk 0 MBR read successfully
11:05:16.872 Disk 0 MBR scan
11:05:16.875 Disk 0 unknown MBR code
11:05:16.878 Disk 0 MBR hidden
11:05:16.907 Disk 0 Partition 1 00 EE GPT 2097151 MB offset 1
11:05:16.911 Disk 0 scanning C:\WINDOWS\system32\drivers
11:05:16.913 Service scanning
11:05:18.087 Modules scanning
11:05:18.090 Disk 0 trace - called modules:
11:05:18.123 ntoskrnl.exe CLASSPNP.SYS disk.sys storport.sys hal.dll storahci.sys
11:05:18.128 1 nt!IofCallDriver → \Device\Harddisk0\DR0[0xffffe00002369060]
11:05:18.133 3 CLASSPNP.SYS[fffff800000a8abb] → nt!IofCallDriver → \Device\00000031[0xffffe000011213d0]
11:05:18.137 AVAST engine scan C:
11:05:18.141 Scan finished successfully
11:05:28.363 Disk 0 MBR has been saved successfully to “C:\Users*\Desktop\MBR.dat"
11:05:28.367 The log file has been saved successfully to "C:\Users*
\Desktop\aswMBR.txt”

I replaced usernames with *

However when clicking "fix mbr" it just gives disk 0 mbr fix error
Never click fix unless instructed to do so by a malware expert

Can you upload your MBR.dat located at Desktop here:

https://www.virustotal.com/

Copy the link here when scanning is done.

Hi Isisariey,

WOT (see my signature below) has this to say about the vendor that distributes SpyHunter: https://www.mywot.com/en/scorecard/enigmasoftware.com?utm_source=addon&utm_content=popup-donuts

You are in good hands with TwinHeadedEagle. Please follow his instructions so he can help you out.

https://www.virustotal.com/en/file/55a3edde03fb7e58bcb1a8c2fc411b788955df00f9e3eb0454a44137a2181a44/analysis/1399112747/

Your MBR is ok. I don’t know 100%, but I think that Aswmbr is not fully compatible with Windows 8, so it is showing strange report.

Thank you for your help. Is their a way I can remove Spy hunter completely?

Just uninstall it through Control Panel.