removing mebroot.k ??

ESET Smart Security finds "mebroot.k trojan" in mbr of "physical drive.1" and ".2" ... I downloaded the removal tool but it doesnt find a "mebroot" in my system ... My system is on drive J: and i suspect the "drive.1" and "drive.2" are drives C: and some other drive ... i copied the tool to the C: root but running it while loged in J: (as the C: system is damaged) with no difference ...

is there a way to make the removal tool work on the mbr of other discs than the system disc i am currently loged in?

 

Welcome Monographix,

The correct (mebroot.k) search term in the appropriate support forum should yield "usable" advice.

 

found the two topics of interest but cant post there.

wanted to ask, will the fixmbr leave my partitions and files intact and my two windows installations (different partitions, same physical drive) intact as well ??

 

Seperate hd's I'm inclined to say "no problem." Two system partitions sharing the same drive? - I think not. Since I'm unable to confirm either first hand, you should a) open a support request with ESET, or b) we're gonna need a little help from the audience. I have a few people in mind that I feel can offer the appropriate advice, and suspect it'll involve some third party program. If you're like some of us who prefer to take the initiative and proof things out for themselves, look into a few of the hits under "backup xp mbr" or "mbr tools."

 

Hello monographix,

do you have 1 or 2 phisical drives?
Can you post a screenshot of your Disk Management? it will help to understand how you have partitioned your drives.
What are your OSes, XP, Vista or both?
for xp
http://support.microsoft.com/kb/314503/en
for vista
http://support.microsoft.com/kb/927392/en

I have some easy to use tools in mind and will tell you how to proceed after you answer the above; incorrectly modifying the mbr can easily kill your partitions table.

Panagiotis

 

Ah, one of the more knowledgeable members I had in mind. Nice of you to offer your "disk wisdom" Panagiotis.

 

you can get rid of Mebroot.k http://www2.gmer.net/mbr/mbr.exe