1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

MBR sector of the 1. physical disk contains probably unknown TSR.BOOT virus

Discussion in 'General Security' started by lil_lyly, Jun 9, 2008.

Thread Status:
Not open for further replies.
  1. lil_lyly

    lil_lyly Thread Starter

    Joined:
    Nov 29, 2006
    Messages:
    23
    Hi all,
    I've been searching the net and quite a fair bit of people have this problem but i can't find a fix to it. Also well reading through the articles, I'm not sure if it is a virus or if its something wrong with NOD32 software. I'm using NOD32 antivirus software and it keep popping up with this message "MBR sector of the 1. physical disk contains probably unknown TSR.BOOT virus Can't be cleaned."

    The reason I'm thinking its a virus is cause my computer just froze and wouldn't go pass the user login. So i formatted the bootable HDD and the message was still there. I have 2 HDD both partitioned into 2 parts each. So 4 partitions over the 2 drives. I unplugged the slave drive and tried fixmbr and fixboot on the master drive. Booted up with the slave drive still unplugged and ran the virus scan with no virus found. So i turned off the computer and plugged the slave drive back in and booted up the computer and ran the virus scan again. There is was the same virus message.

    So I'm pretty sure the virus is on the slave drive, but is there anyway to fix it without formatting? and even so would formatting and doing the fixmbr and fixboot solve the problem?

    Please help its driving me crazy as the slave drive has files i would like to keep and theres like 250GB worth of stuff that i would have to back up.
    Thanks in advance.
     
  2. lil_lyly

    lil_lyly Thread Starter

    Joined:
    Nov 29, 2006
    Messages:
    23
    Update

    Ok I'm pretty sure its a virus now as its coming up with win32/mebroot.k trojan and also the computer keeps freezing after about 5mins. I've been reading that people says to use the fixmbr in the recovery console. As I've done that on the Master drive already but still have the virus, what i want to know is if i do the fixmbr on the slave drive (where all my files are), would it erase my files? or by doing fixmbr just replace the master boot record for the slave drive only and still keep my files safe?
     
As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/719997

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice