There's no such thing as a stupid question, but they're the easiest to answer.
JoinTour
Login
 
Tag Cloud
access audio avg avg 8 bios blue screen boot browser bsod computer cpu crash css dell desktop driver drivers dvd email error excel explorer firefox firefox 3 freeze gimp graphics hard drive hardware hijackthis hjt install internet internet explorer itunes keyboard laptop macro malware missing monitor network networking outlook outlook 2003 outlook 2007 outlook express password popups problem problems router seo server slow sound sp3 spyware trojan usb video virtumonde virus vista vundo windows windows vista windows xp winxp wireless
General Security
Search
Search in:
 
Advanced Search
Tech Support Guy Forums > Security & Malware Removal > General Security >
MBR sector of the 1. physical disk contains probably unknown TSR.BOOT virus


HELLO AND WELCOME! Before you can post your question, you'll have to register -- it's completely free! Click here to join today! We highly recommend that you print a copy of our Guide for New Members. Enjoy!

 
Thread Tools
lil_lyly's Avatar
Junior Member with 23 posts.
 
Join Date: Nov 2006
09-Jun-2008, 07:24 PM #1
MBR sector of the 1. physical disk contains probably unknown TSR.BOOT virus
Hi all,
I've been searching the net and quite a fair bit of people have this problem but i can't find a fix to it. Also well reading through the articles, I'm not sure if it is a virus or if its something wrong with NOD32 software. I'm using NOD32 antivirus software and it keep popping up with this message "MBR sector of the 1. physical disk contains probably unknown TSR.BOOT virus Can't be cleaned."

The reason I'm thinking its a virus is cause my computer just froze and wouldn't go pass the user login. So i formatted the bootable HDD and the message was still there. I have 2 HDD both partitioned into 2 parts each. So 4 partitions over the 2 drives. I unplugged the slave drive and tried fixmbr and fixboot on the master drive. Booted up with the slave drive still unplugged and ran the virus scan with no virus found. So i turned off the computer and plugged the slave drive back in and booted up the computer and ran the virus scan again. There is was the same virus message.

So I'm pretty sure the virus is on the slave drive, but is there anyway to fix it without formatting? and even so would formatting and doing the fixmbr and fixboot solve the problem?

Please help its driving me crazy as the slave drive has files i would like to keep and theres like 250GB worth of stuff that i would have to back up.
Thanks in advance.
lil_lyly's Avatar
Junior Member with 23 posts.
 
Join Date: Nov 2006
12-Jun-2008, 07:57 AM #2
Quote:
Originally Posted by lil_lyly View Post
Hi all,
I've been searching the net and quite a fair bit of people have this problem but i can't find a fix to it. Also well reading through the articles, I'm not sure if it is a virus or if its something wrong with NOD32 software. I'm using NOD32 antivirus software and it keep popping up with this message "MBR sector of the 1. physical disk contains probably unknown TSR.BOOT virus Can't be cleaned."

The reason I'm thinking its a virus is cause my computer just froze and wouldn't go pass the user login. So i formatted the bootable HDD and the message was still there. I have 2 HDD both partitioned into 2 parts each. So 4 partitions over the 2 drives. I unplugged the slave drive and tried fixmbr and fixboot on the master drive. Booted up with the slave drive still unplugged and ran the virus scan with no virus found. So i turned off the computer and plugged the slave drive back in and booted up the computer and ran the virus scan again. There is was the same virus message.

So I'm pretty sure the virus is on the slave drive, but is there anyway to fix it without formatting? and even so would formatting and doing the fixmbr and fixboot solve the problem?

Please help its driving me crazy as the slave drive has files i would like to keep and theres like 250GB worth of stuff that i would have to back up.
Thanks in advance.
Update

Ok I'm pretty sure its a virus now as its coming up with win32/mebroot.k trojan and also the computer keeps freezing after about 5mins. I've been reading that people says to use the fixmbr in the recovery console. As I've done that on the Master drive already but still have the virus, what i want to know is if i do the fixmbr on the slave drive (where all my files are), would it erase my files? or by doing fixmbr just replace the master boot record for the slave drive only and still keep my files safe?
Reply


Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are Off
Refbacks are Off

You Are Using:
Server ID
Advertisements do not imply our endorsement of that product or service.
All times are GMT -4. The time now is 06:48 PM.
Copyright © 1996 - 2008 TechGuy, Inc. All rights reserved.
Powered by vBulletin, Copyright © 2000 - 2008, Jelsoft Enterprises Ltd.
Search Engine Optimization by vBSEO 3.1.0
Powered by Cermak Technologies, Inc.