False Alert -- Drive Crypt Plus Pack

Discussion in 'NOD32 version 2 Forum' started by shapechanger7, Feb 14, 2004.

Thread Status:
Not open for further replies.
  1. NOD detects an unknown TSR.Boot.Virus
     
  2. Paul Wilders

    Paul Wilders Administrator

    Joined:
    Jul 1, 2001
    Posts:
    12,472
    Location:
    The Netherlands
    Please submit the file to Eset for further investignation.

    regards.

    paul
     
  3. Paul,

    I do not know which files I need to submit. Actually, I believe there is no file to submit because it is a boot virus. Eset needs to install hard drive encryption utils like DCPP, Safeguard Easy, Safeboot Solo etc. to figure out what's the problem.

    Regards,

    Sh@pechanger
     
  4. Paul Wilders

    Paul Wilders Administrator

    Joined:
    Jul 1, 2001
    Posts:
    12,472
    Location:
    The Netherlands
    shapechanger,

    You could drop them an email pointing to the website from the software in question ;)

    regards.

    paul
     
  5. I do not like to e-mail them since I have already said what I can say. I expect them to read their own forum ;-)

    Information from log file: "MBR sector of the 1. physical disk contains probably unknown TSR.BOOT virus."

    The website for DCPP is http://www.drivecrypt.com/dcplus.html (Btw. ... this is a very good program.)
     
  6. mrtwolman

    mrtwolman Eset Staff Account

    Joined:
    Dec 5, 2002
    Posts:
    613
    Any bootloader has code very similar to boot virus...Heuristic can scream on it with no problem. I think Eset will need a bit of your assistance. Most likely they will send you a proggy which will save the MBR/boot sector to a file and you will have to send it to Eset...

    Regards,
     
  7. visitor

    visitor Guest

    I think it is false positive read mine here
    http://www.wilderssecurity.com/showthread.php?t=21630
     
Thread Status:
Not open for further replies.