MBR partition manager 2002

Discussion in 'NOD32 version 2 Forum' started by couldbe, Dec 22, 2003.

Thread Status:
Not open for further replies.
  1. couldbe

    couldbe Registered Member

    Joined:
    Dec 22, 2003
    Posts:
    34
    hi
    I installed partition manager 2002 from paragon. every thing was working fine,
    I allowed a pic on MSN :rolleyes: and nod opened screen that says an error occurred in the MBR sector on the no 1 physical drive contains probable unknown TSR.BOOT virus.

    nod will then scan and tell me I have no virus.

    q. Is it possible that I do have a virus?
    q. Is it likely that paragon's MBR file is not accepted by nod yet?
    q, Should nod prevent such a received file affecting my comp?
    q. I've uninstalled the boot manager . I put it back to rewrite the MBR but the message still appears. What can/should I do?

    I don't seem to be able to locate any previous on this issue.
    I realise I could have received a virus with the MSN pic.

    my thanks in anticipation of your help
    couldbe
     
  2. sir_carew

    sir_carew Registered Member

    Joined:
    Sep 2, 2003
    Posts:
    884
    Location:
    Santiago, Chile
    Hi,
    This suspicious may be a new boot virus, or a false positive (False alarm). Do you have other antivirus?, it report your MBR as infected?
    What Windows do you use?
    You can save your MBR to a image file using Norton Utilities for example, and send it to samples@eset.com for a analysis.
     
  3. couldbe

    couldbe Registered Member

    Joined:
    Dec 22, 2003
    Posts:
    34
    my operating system is win 98 2ed
    my only av is nod 32
    I loaded norton utilities and copied records for partitions and forwarded to samples todate no response?
    will try an online av check
    couldbe
     
  4. mrtwolman

    mrtwolman Eset Staff Account

    Joined:
    Dec 5, 2002
    Posts:
    613
    The cause is in my opinion a rather different. Due the circumstances you described i'd say it is almost on 99,99999 pec cent heuristic false possitive.
    Boot manager placed some code to MBR and the code bootmanagers use is very similar to the code of boot viruses.
    My suggestion - you should contact ESEt supprot and they will fix the false possitive with you.

    Regards.
     
  5. couldbe

    couldbe Registered Member

    Joined:
    Dec 22, 2003
    Posts:
    34
    With apologies for late reply. Family health issues.
    Lost a lot through hacker attacks :oops:
    Had to reformat both drives to get them to run again so gave up on thryng to multiboot system.

    Thanks for your concern.

    Couldbe
     
Thread Status:
Not open for further replies.