nod32 and DriveCrypt from SecurStar

Hi,

I have my entire disk encrypted with DriveCrypt from SecurStar (required by my employer). However, nod32 thinks I have a virus:

"MBR sector of the 1. physical disk contains probably unknown TSR.BOOT virus [7]."

Is there a way to let nod32 know that DriveCrypt isn't a virus?

 

With this issue can you please send an email to support@nod32.com and place a link to this thread. If you do not hear from Eset within 3 days (allows for weekends), please advise us here...

We would appreciate if you could keep us in the loop with your progress, as we all learn this way…

Cheers

 

Will do. Thanks!

 

Hello cdysthe,

I suggest you go to the On-Demand Scanner and on the 'Setup' tab, un-check 'Boot sectors'. In the meantime, Eset will install this application and try to replicate the problem to find a fix.

Bandicoot.

 

I will do that and await a solution. Please note that you need to add the "BootAuth" option for the drive you install DriveCrypt on to replicate my setup. Thank you for your timely response!

 

Hello cdysthe,

OK, we've checked it out and you're absolutely right. DriveCrypt is being shown in the scanner as a false positive. So we've sent the relevant file information to our analysts and a fix will be procured ASAP.

I'll post again as soon as it's ready.

Bandicoot.

 

This false positive has been fixed in update 1.983. Should your NOD32 still report it, feel free to contact the NOD32 technical support at support@eset.com.

 

After the update the false positive is gone. Thanks!