Malwarebytes and Win7 system image

Xtreme Gamer · April 28, 2014

I did a virus scan on a win7 laptop with malwarebytes. It found 2 rootkits in the mbr on sector 0. Question is, is if it removes the rootkits from the installed os mbr. Can it also remove anything from the system image?

Thanks for any help!!!!

brownninja97 · April 28, 2014

The pro version does enable scans of the image, not sure about the free version, it didnt mess with system images last time i used the free version but that was some time ago, might have changed especially with the recent overhaul of it.

Xtreme Gamer · April 28, 2014

The pro version does enable scans of the image, not sure about the free version, it didnt mess with system images last time i used the free version but that was some time ago, might have changed especially with the recent overhaul of it.

I ask because my friend uses the premium malwarebytes. I ran a scan on her computer, found rootkits, rebooted, damaged the mbr now all thats left aft data recovery is the image. So if I try to restore the image, does that mean the image's mbr is also damaged?

Xtreme Gamer · April 29, 2014

The pro version does enable scans of the image, not sure about the free version, it didnt mess with system images last time i used the free version but that was some time ago, might have changed especially with the recent overhaul of it.

OK, if no one can answer the question. Then how about this, If I move the hdd that has the damaged win7 mbr on it to my desktop and use aomei to rebuild/repair the mbr. Would that make it bootable again 100%?

Danielaustin1234 · April 29, 2014

I had the same thing happen with Malwarebytes. If it is asking to remove something that most likely means that it will not do any harm to your computer

Xtreme Gamer · April 29, 2014

I had the same thing happen with Malwarebytes. If it is asking to remove something that most likely means that it will not do any harm to your computer

Well in my case, it did harm the computer. Only because the rootkit took either the whole mbr with it to quarantine/deletion or it took part of it. So can I recover anything from it? Or can I put it into another computer and use aomei to rebuild the mbr. Also is the mbr recoverable if 50-100% of it is gone? Not saying that much is. It's just incase.

Danielaustin1234 · April 29, 2014

I believe you could recover everything from it but dont quote me on it. I have never had this problem but I dont see why you could not recover everything.

Well in my case, it did harm the computer. Only because the rootkit took either the whole mbr with it to quarantine/deletion or it took part of it. So can I recover anything from it? Or can I put it into another computer and use aomei to rebuild the mbr. Also is the mbr recoverable if 50-100% of it is gone? Not saying that much is. It's just incase.