probably unknown TSR.BOOT virus unable to clean: false positive?

Hi All

I'm seeing this old log entry. I hadn't noticed it previously.

27/02/2012 11:29:29 Startup scanner boot sector active boot sector of the 0. physical disk probably unknown TSR.BOOT virus unable to clean

Now I have run many scans since february, and never has this popped up since.

I googled around and it seems quite a few user have seen this on the 27th Feb.

My question, is this a genuine threat, or is it a false positive? Obviously I value my security, so if is something real is a real therat, I will have to take actions to remedy.

Nod32 is updated every day and is fully current.

Thanks.

 

Hello smurkenstein
There has been many threads about the notorious TSR.BOOT virus . Some saying it were a false positive other threads indicating an uncertainty. I really think you should contact your local support in France. I have found the Link to your support if needed : Demandes de support

Links to the threads: https://www.wilderssecurity.com/showthread.php?t=323269&highlight=TSR.BOOT
............................ https://www.wilderssecurity.com/showthread.php?t=322146&highlight=TSR.BOOT

Meilleures salutations

 

Thanks Janus
I am an english guy, and my french isn't too good.
I did try a search on here. Will try again.

 

OOH sorry didn't know. Okay then, here is a link to a "non French" customer care site, were you can submit a case if needed : http://www.eset.com/support/contact?ref=wsf&art=soln2372&seg=home Forgot to mention if you will use the link to submit a support case, then you cannot use IE9. The reasons is that the "Case Issue field " is greyed out and non functional in IE9. You can use any other browser. ( Eset know about the issue )

And have a good weekend.

 

Hello,

Is there anything unusual about the system, e.g., multiboot system, disk encryption software installed and so forth?

Regards,

Aryeh Goretsky

 

If the signature was 6918, this was false positive.
https://www.wilderssecurity.com/showthread.php?t=319119&highlight=tsr.boot

 

Yes. There are two boot sectors. One is from my old system which was vista. When I installed win 7 on top, I created a new partition and a separate boot sector. The old vista boot sector is suppressed on startup with win7's boot control option.

I also had acronis installed, but I removed that a while back.

Thanks.

 

Hard to say, but my finding in the log was on the 27th Feb and that fits with the timing of the cluster of false positives.

Thanks for linking that thread.