MBR ...help me for a expert of GMER ?

General Topics
1

sorry for this OT…

i scan my sistem windows xp with GMER rootkit :

GMER 1.0.15.15640

---- Disk sectors - GMER 1.0.15 ----

Disk \Device\Harddisk0\DR0 MBR read error
Disk \Device\Harddisk0\DR0 MBR BIOS signature not found 0

---- EOF - GMER 1.0.15 ----

now is in BLACK ! but, what is this MBR READ ERROR ???

i scan with the tool MBR.EXE from gmer and say : MBR ok !

and with the tool avast aswmbr.exe and say MBR ok !

now ? MBR in my pc is ok ? best and kiss… Mery

2

Can you post the aswMBR log?

3

yes …is this the complete log:

aswMBR version 0.9.5.256 Copyright(c) 2011 AVAST Software
Run date: 2011-06-02 11:37:02

11:37:02.625 OS Version: Windows 5.1.2600 Service Pack 2
11:37:02.625 Number of processors: 2 586 0x4802
11:37:02.625 ComputerName: HP UserName:
11:37:06.062 Initialize success
11:37:13.421 Disk 0 (boot) \Device\Harddisk0\DR0 → \Device\000000a0
11:37:13.421 Disk 0 Vendor: SAMSUNG_HM251JI 2SS00_01 Size: 238475MB BusType: 3
11:37:13.484 Disk 0 MBR read successfully
11:37:13.484 Disk 0 MBR scan
11:37:13.484 Disk 0 Windows XP default MBR code
11:37:13.484 Disk 0 scanning sectors +488392065
11:37:13.531 Disk 0 scanning C:\WINDOWS\system32\drivers
11:37:21.375 Disk 0 MBR has been saved successfully to “C:\Documents and Settings\Proprietario\Desktop\MBR.dat”
11:37:21.390 The log file has been saved successfully to “C:\Documents and Settings\Proprietario\Desktop\aswMBR.txt”

MBR clear ? not infect ? MBR.EXE from GMER say ok !

4

nothing help me ???

MBR ok or infect on my pc ???

5

Looks OK to me - what are your problems ?

6

NO problems !

but why GMER say this no read on MBR ? just an curiosity … best Mery

7

Don’t worry :wink:

GMER program contains a component ( mbr.exe )that runs and reads the The Master Boot Record (MBR).
More info:
http://www.dewassoc.com/kbase/hard_drives/master_boot_record.htm

GMER for some reason failed to run the file.

Disk \Device\Harddisk0\DR0 MBR [b]read error[/b]

aswMBR also has integrated the mbr.exe component


11:37:13.484    Disk 0 MBR read successfully
11:37:13.484    Disk 0 MBR scan
11:37:13.484    Disk 0 Windows XP default MBR code
i scan with the tool MBR.EXE from gmer and say : MBR ok !

problem solved ;D