mbr results show copy of mbr found in sector

Dell Optiplex 760
March 15, 2010 at 12:31:45
Specs: Windows XP
When running mbr, the results show:
copy of MBR has been found in sector 0x2542e2b0
malicious code @ sector 0x02542e2b3
PE file found in sector at 0x02542e2c9
I know the infection is gone, but would really like to get rid of this message since Symantec picks it up, but does nothing. I would like a utility that would clear or delete these leftovers so that someone is lulled into ignoring antivirus messages. I have already done fixmbr, wiped free space with ccleaner, run combofix and installed the XP recovery console. I guess I could use a sector editor and zero it out. I have seen many people ask the question, but no answers. Surely there is a utility to do this. Mebroot was the original problem.

See More: mbr results show copy of mbr found in sector

March 16, 2010 at 10:34:17
I should have said "not lulled". I do not want the user to start ignoring the warnings.

Report •

March 25, 2010 at 12:23:51
The only way I've found so far is this, rather klunky method:

1. Ghost 2003, copy the hard drive to a spare drive.
2. Low level format the original drive.
3. Ghost the spare's contents back to the original drive.
4. Boot the machine up, and the remnant will be gone.

Hardly worthy of instructions for a regular user who needs
malware removal help, but if you're in a shop environment, it
has worked for me.

Report •

March 26, 2010 at 12:07:37
since Symantec picks it up, but does nothing
That's about all Symantec Norton is worth anymore. That may be your main problem

Some HELP in posting on Computing.net plus free progs and instructions Cheers

Report •
Related Solutions

Ask Question