MBR virus (Stonehenge) detected

Viruses and worms
1

Hi, I just downloaded a trial copy of Avast Pro because my system has been infected by the stonehenge boot sector virus and my regular internet security program didn’t find it. A friend told me about Avast.
Avast on scanning detects the virus with no problem but doesn’t alow me to do anything with it.
Does anyone have a suggestion on how to clean the boot sector

Thank you in advance for any help

2

*download and save aswMBR.exe to desktop http://public.avast.com/~gmerek/aswMBR.exe
*click the aswMBR icon to run
*then click “scan” and “save log” and post that log here

Follow this guide from our expert malware remover Essexboy
http://forum.avast.com/index.php?topic=53253.0
( post the logs here in this topic and not in the guide )

To avoid using multiple post with copy and paste you have to attach the log`s
Lower left corner: Additional Options > Attach ( Malwarebytes log / OTS log ) save OTS log as ANSI

Essexboy will look at the logs when he arrive here later today…

3

also try SUPERAntispyware update it do a full scan and do attach logs…

regards,
com155.

4

Besides Superantispyware is useless against rootkits and mbam would be a better option,it would be very kind of you to provide a download link for every tool you suggest.

5

try noeton power eraser.download link :
http://us.norton.com/support/DIY/index.jsp

also use kaspersky tdss killer.
also use kaspersky tdss killer.
and follow the steps:

OK, another tool to check for other types of rootkit.

[*]Download TDSSKiller and save it to your Desktop.
[*]Extract its contents to your desktop.
[*]Once extracted, open the TDSSKiller folder and doubleclick on TDSSKiller.exe to run the application, then on Start Scan.

http://i466.photobucket.com/albums/rr21/JSntgRvr/TDSSKillermain.png

[*]If an infected file is detected, the default action will be Cure, click on Continue.

http://i466.photobucket.com/albums/rr21/JSntgRvr/TDSSKillerMal-1.png

[*]If a suspicious file is detected, the default action will be Skip, click on Continue.

http://i466.photobucket.com/albums/rr21/JSntgRvr/TDSSKillerSuspicious.png

[*]It may ask you to reboot the computer to complete the process. Click on Reboot Now.

http://i466.photobucket.com/albums/rr21/JSntgRvr/TDSSKillerCompleted.png

[*]If no reboot is require, click on Report. A log file should appear. Please copy and paste the contents of that file here.
[*]If a reboot is required, the report can also be found in your root directory, (usually C:\ folder) in the form of “TDSSKiller.[Version][Date][Time]_log.txt”. Please copy and paste the contents of that file here.
[/quote]