RogueKiller detects Root.MBR

[Wizzlbang]

So Roguekiller is consistently alerting me about a Root.MBR infection, but TDSSKiller and HitmanPro can't seem to find anything.

TDSSKiller found two threads and removed them (Which Norton deemed a threat blocked only after they were quarantined, some help you are norton) But after a reboot it found no further infections. Stupidly, I didn't save the log here. However roguekiller is still alerting me to this infection. When I try to Fix MBR on RogueKiller, it just says 'Unable to fix MBR: 0x1

So yeah, TDSSKiller says everything is fine, and HitmanPro is only finding tracking cookies. What's the deal here? Is there anything I can do?

I'm attaching the logs here.

[thisisu]

Welcome to MajorGeeks, Wizzlbang !

RogueKiller could be reporting an issue that doesn't exist. What actual malware problems are you experiencing?

Can you attach the rest of your logs from the Read and Run Me First?

[Wizzlbang]

My computer's been slowing lately, and there's a soft rattly sound coming from my hard drive, but I've chalked these up to run-of-the-mill impending hard drive failure. And I've also been getting a lot more infections than usual, which I read is something Rootkits tend to do.

Unfortunately I've also just restored this computer to factory settings after reading that it's the only way to get rid of an MBR Rootkit, so I don't have the original reports, but after reinstalling roguekiller I got the same results.

Here's a more recent roguekiller report and a recent malwarebytes scan. anything else you need to assess whether or not this is an actual problem? Seems like I've had nothing but problems with this laptop since I got it.

[thisisu]

Originally Posted by Wizzlbang

but after reinstalling roguekiller I got the same results.

Yeah.. false detection. It happens... RogueKiller's MBR scanner is kind of a bonus / experimental feature.

TDSSKiller and HitmanPro are both better suited for MBR infections but I don't think you had one.

Please download aswMBR to your desktop.

• Double-click aswMBR.exe to run (Vista/7 right-click and select Run as Administrator)
• Select Yes when asked "Would you like to download latest Avast! virus definitions?"
• Click the [Scan] button.
• On completion of the scan click [Save log], save it to your desktop. Then zip up and and attach the log and MBR.dat to your next message. (How to attach)

[Wizzlbang]

ok, here it is. Thanks for your time.

[thisisu]

I don't think you have anything to worry about malware wise. The computer's slowness could be caused by a hardware problem as you already suspect.

[Wizzlbang]

That's a load off my mind. Thank you for your time!

[thisisu]

No problem. Be safe