False Alert -- Drive Crypt Plus Pack

Discussion in 'NOD32 version 2 Forum' started by shapechanger7, Feb 14, 2004.

Thread Status:
Not open for further replies.
  1. NOD detects an unknown TSR.Boot.Virus
     
  2. Paul Wilders

    Paul Wilders Administrator

    Joined:
    Jul 1, 2001
    Posts:
    12,475
    Location:
    The Netherlands
    Please submit the file to Eset for further investignation.

    regards.

    paul
     
  3. Paul,

    I do not know which files I need to submit. Actually, I believe there is no file to submit because it is a boot virus. Eset needs to install hard drive encryption utils like DCPP, Safeguard Easy, Safeboot Solo etc. to figure out what's the problem.

    Regards,

    Sh@pechanger
     
  4. Paul Wilders

    Paul Wilders Administrator

    Joined:
    Jul 1, 2001
    Posts:
    12,475
    Location:
    The Netherlands
    shapechanger,

    You could drop them an email pointing to the website from the software in question ;)

    regards.

    paul
     
  5. I do not like to e-mail them since I have already said what I can say. I expect them to read their own forum ;-)

    Information from log file: "MBR sector of the 1. physical disk contains probably unknown TSR.BOOT virus."

    The website for DCPP is http://www.drivecrypt.com/dcplus.html (Btw. ... this is a very good program.)
     
  6. mrtwolman

    mrtwolman Eset Staff Account

    Joined:
    Dec 5, 2002
    Posts:
    613
    Any bootloader has code very similar to boot virus...Heuristic can scream on it with no problem. I think Eset will need a bit of your assistance. Most likely they will send you a proggy which will save the MBR/boot sector to a file and you will have to send it to Eset...

    Regards,
     
  7. visitor

    visitor Guest

    I think it is false positive read mine here
    http://www.wilderssecurity.com/showthread.php?t=21630
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.