Congratulations to AcaCandy on her 100,000th post!
There's no such thing as a stupid question, but they're the easiest to answer.
JoinTour
Login
 
Tag Cloud
acer black screen blue screen boot bsod computer connection crash css dell display driver drivers email error ethernet excel firefox firefox 3 hard drive internet internet explorer itunes laptop linux malware monitor network networking nvidia outlook outlook 2003 outlook 2007 outlook express partition problem router security slow software sound startup trojan usb video virus vista windows windows xp wireless
General Security
Search
Search in:
 
Advanced Search
Tech Support Guy Forums > Security & Malware Removal > General Security >
MBR sector of the 1. physical disk contains probably unknown TSR.BOOT virus


HELLO AND WELCOME! Before you can post your question, you'll have to register -- it's completely free! Click here to join today! We highly recommend that you print a copy of our Guide for New Members. Enjoy!

Closed Thread
 
Thread Tools
lil_lyly's Avatar
Junior Member with 23 posts.
 
Join Date: Nov 2006
09-Jun-2008, 07:24 PM #1
MBR sector of the 1. physical disk contains probably unknown TSR.BOOT virus
Hi all,
I've been searching the net and quite a fair bit of people have this problem but i can't find a fix to it. Also well reading through the articles, I'm not sure if it is a virus or if its something wrong with NOD32 software. I'm using NOD32 antivirus software and it keep popping up with this message "MBR sector of the 1. physical disk contains probably unknown TSR.BOOT virus Can't be cleaned."

The reason I'm thinking its a virus is cause my computer just froze and wouldn't go pass the user login. So i formatted the bootable HDD and the message was still there. I have 2 HDD both partitioned into 2 parts each. So 4 partitions over the 2 drives. I unplugged the slave drive and tried fixmbr and fixboot on the master drive. Booted up with the slave drive still unplugged and ran the virus scan with no virus found. So i turned off the computer and plugged the slave drive back in and booted up the computer and ran the virus scan again. There is was the same virus message.

So I'm pretty sure the virus is on the slave drive, but is there anyway to fix it without formatting? and even so would formatting and doing the fixmbr and fixboot solve the problem?

Please help its driving me crazy as the slave drive has files i would like to keep and theres like 250GB worth of stuff that i would have to back up.
Thanks in advance.
lil_lyly's Avatar
Junior Member with 23 posts.
 
Join Date: Nov 2006
12-Jun-2008, 07:57 AM #2
Quote:
Originally Posted by lil_lyly View Post
Hi all,
I've been searching the net and quite a fair bit of people have this problem but i can't find a fix to it. Also well reading through the articles, I'm not sure if it is a virus or if its something wrong with NOD32 software. I'm using NOD32 antivirus software and it keep popping up with this message "MBR sector of the 1. physical disk contains probably unknown TSR.BOOT virus Can't be cleaned."

The reason I'm thinking its a virus is cause my computer just froze and wouldn't go pass the user login. So i formatted the bootable HDD and the message was still there. I have 2 HDD both partitioned into 2 parts each. So 4 partitions over the 2 drives. I unplugged the slave drive and tried fixmbr and fixboot on the master drive. Booted up with the slave drive still unplugged and ran the virus scan with no virus found. So i turned off the computer and plugged the slave drive back in and booted up the computer and ran the virus scan again. There is was the same virus message.

So I'm pretty sure the virus is on the slave drive, but is there anyway to fix it without formatting? and even so would formatting and doing the fixmbr and fixboot solve the problem?

Please help its driving me crazy as the slave drive has files i would like to keep and theres like 250GB worth of stuff that i would have to back up.
Thanks in advance.
Update

Ok I'm pretty sure its a virus now as its coming up with win32/mebroot.k trojan and also the computer keeps freezing after about 5mins. I've been reading that people says to use the fixmbr in the recovery console. As I've done that on the Master drive already but still have the virus, what i want to know is if i do the fixmbr on the slave drive (where all my files are), would it erase my files? or by doing fixmbr just replace the master boot record for the slave drive only and still keep my files safe?
Closed Thread

THIS THREAD HAS EXPIRED.
Are you having the same problem? We have volunteers ready to answer your question, but first you'll have to join for free. Need help getting started? Check out our Welcome Guide.


Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
WELCOME TO TECH SUPPORT GUY! Are you looking for the solution to your computer problem? Join our site today to ask your question -- for free! Our site is run completely by volunteers who help people like you solve computer problems. See our Welcome Guide to get started.



Thread Tools


You Are Using:
Server ID
Advertisements do not imply our endorsement of that product or service.
All times are GMT -4. The time now is 12:55 PM.
Copyright © 1996 - 2008 TechGuy, Inc. All rights reserved.
Powered by vBulletin, Copyright © 2000 - 2008, Jelsoft Enterprises Ltd.
Search Engine Optimization by vBSEO 3.1.0
Powered by Cermak Technologies, Inc.