Results 1 to 3 of 3

Thread: 3 MBR's and a hidden file without extension

  1. #1
    Junior Member
    Join Date
    Dec 2012
    Posts
    2

    Default 3 MBR's and a hidden file without extension

    These were shown on a rootkit scan in Spybot2 as hidden files
    Master Boot Records
    PhysicalDrive0
    PhysicalDrive1
    PhysicalDrive2

    I have two hard drives, but only one operating system on them, or do I? I thought that a Master Boot Record was to run an operating system

    I found this file however, where they said it was.
    C:\WINDOWS\SYSTEM32\02175C
    the file has no extension like .dll or .exe

    When I open it as a .txt file it shows
    Ӻb

    Do I have something to worry about?

  2. #2
    Junior Member
    Join Date
    Jan 2013
    Posts
    4

    Default

    Do you use a USB drive? Thumb drive? Camera? Phone?

    Type and paste the results from this in an ADMIN cmd prompt.
    wmic /node:127.0.0.1 path win32_diskdrive get /format:list

    Feel free to censor any data that you don't want on the internet first.

  3. #3
    Junior Member
    Join Date
    Dec 2012
    Posts
    2

    Default

    I do have a camera, a thumb drive, and a printer that accepts memory cards. They show up on (E drive, when nothing is connected it is Removable Disk (E So if I can boot from it there has to be a boot record?

    I tried the code you gave me and it said
    'wmic' is not recognized as an internal or external command,
    operable program or batch file. What would the code do, list all the disk drives?
    I ran a program called MBRCheck.exe It said I have 2 MBR and one had an unknown code.
    I am running Windows XP Home Edition Version 2002 Service Pack 3.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •