PDA

View Full Version : 3 MBR's and a hidden file without extension



RichardLucier
2012-12-21, 07:00
These were shown on a rootkit scan in Spybot2 as hidden files
Master Boot Records
PhysicalDrive0
PhysicalDrive1
PhysicalDrive2

I have two hard drives, but only one operating system on them, or do I? I thought that a Master Boot Record was to run an operating system

I found this file however, where they said it was.
C:\WINDOWS\SYSTEM32\02175C
the file has no extension like .dll or .exe

When I open it as a .txt file it shows
Ӻb

Do I have something to worry about?

S1ybot
2013-01-03, 22:00
Do you use a USB drive? Thumb drive? Camera? Phone?

Type and paste the results from this in an ADMIN cmd prompt.
wmic /node:127.0.0.1 path win32_diskdrive get /format:list

Feel free to censor any data that you don't want on the internet first.

RichardLucier
2013-01-04, 03:11
I do have a camera, a thumb drive, and a printer that accepts memory cards. They show up on (E:) drive, when nothing is connected it is Removable Disk (E:) So if I can boot from it there has to be a boot record?

I tried the code you gave me and it said
'wmic' is not recognized as an internal or external command,
operable program or batch file. What would the code do, list all the disk drives?
I ran a program called MBRCheck.exe It said I have 2 MBR and one had an unknown code.
I am running Windows XP Home Edition Version 2002 Service Pack 3.