PDA

View Full Version : TSR Boot Virus on one of out servers


jasonblake7
August 19th, 2008, 07:14 AM
Hi.

Recently moved to using NOD32 from macafee. On one of our windows 2003 servers Nod32 is detecting this possible virus.

19/08/2008 10:24:50 Startup scanner boot sector MBR sector of the 1. physical disk probably unknown TSR.BOOT virus unable to clean.

Am not sure if its a false positive or not. We have other HP proliants here that are ok, This is the only one using a smart array 5300 raid controller though.
An ondemand scan of the boot sector also shows the same. "MBR sector of the 1. physical disk - probably unknown TSR.BOOT virus [7]"

Im not sure what to do next, whats your opinions ?

Eryan
August 26th, 2008, 09:47 PM
Hi, this sounds like a false positive. If you're still dealing with this, please open a case with support: http://www.eset.com/support/contact.php

we'll get a boot sector dump and submit it to the virus lab. -thanks

jasonblake7
August 27th, 2008, 04:44 AM
Thanks for the reply Eyran, I already did that and someone from eset uk contacted me. I did the mbr dump and forwarded him the boo files etc. He them sent these to the files team for them to look at.

Will let you know the outcome when I here back.