Are you one of the computer users who feel upset with MBR:\\.\PHYSICALDRIVE0\Partition2 virus now? Recently, many users who have installed Avast antivirus may get such annoying issue that the antivirus shows a popup frequently saying it detects MBR:\\.\PHYSICALDRIVE0\Partition2, but when you try to delete it or move the virus into chest, you will receive a message “Error: The request is not supported (50)”.
This type of virus makes modifications to the master boot record (MBR) of the compromised PC. When activated, it alters the particular registry entry to your computer so that you may get constant popup once Windows is launched. It uses a lot of system resources to trace your Internet activities or distribute pop-up ads that may greatly slow down the computer or even make it crash randomly. Moreover, it can also give an attacker access and control over a machine putting a victim’s confidential information at great risk. Users always acquire this Trojan by visiting infected websites. On local networked computers, the Trojan will spread by infecting files on shared folders and drives. It may also spread through USB drives and other unsafe external devices. No matter how you get it installed, you should get rid of it as soon as possible.
Users must wonder why the infection is reported blocked again and again, as though there is no way to remove it completely. Many computer users may have the same experience that they have tried a sea of antivirus software recommended online but still end up with frustration. Actually users should know MBR:\\.\PHYSICALDRIVE0\Partition2 is another risky threat that can easily escape from any antivirus program and it will inject a code into legitimate Windows processes in order to conceal itself and evade antivirus program’s detection. Thus, manual removal is required to cope with this infection.
1. Show hidden files and folders.
Open Folder Options by clicking the Start button, clicking Control Panel, clicking Appearance and Personalization, and then clicking Folder Options.
Click the View tab.
Under Advanced settings, click Show hidden files and folders, uncheck Hide protected operating system files (Recommended) and then click OK.
2. Open Registry entries. Find out the malicious files and entries and then delete all.
Attention: Always be sure to back up your PC before making any changes.
a. Press the “Start” button and then choose the option “Run”. In the “Open” field, type “regedit” and click the “OK” button.
b. All malicious files and registry entries that should be deleted:
%AllUsersProfile%\[random]
%AppData%\Roaming\Microsoft\Windows\Templates\[random]
%AppData%\Local\[random].exe
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “[RANDOM]”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “[RANDOM].exe”
Once MBR:\\.\PHYSICALDRIVE0\Partition2 is installed, it can corrupt your computer by performing many harmful actions. For instance: 1. download and install other threats from a remote server without your permission. 2. redirect users to other malicious or suspicious website randomly. 3. steal your privacy and compromises your security. 4 display lots of annoying commercial advertisements. 5. reduce your PC performance notably. Most of time, this threatcan break into the target computer by exploiting software vulnerability. Once it gains an access, it will apply an advance technique that aims to conceal itself and evades anti-virus detection. Thus, it is suggested users not to waste your time in downloading any programs that claims can remove the virus or performing a full scan. To cope with this threat, you had better use a manual removal to have it removed in time.
Published by & last updated on June 6, 2013 5:20 am
Leave a Reply
You must be logged in to post a comment.