Virus - Haaaalp pl0x!

Right, I plugged my mate's virus-ridden laptop hard drive into my computer the other day so I could get some files and stuff off it as it was being slow and annoying and crashing loads.

I was having a bit of a n00b day and didn't think the viruses would transfer themselves just like that (and having done a scan, I didn't find anything like what I've just found on my PC, it was just general trojans and stuff).

Anyway, shortly afterwards, my computer wouldn't boot, because I fiddled with XP on the laptop hard drive whilst it was plugged into my PC, but I put a few lines into a command prompt on my Windows DVD and repaired the MBR and my computer successfully booted again, no problem so far.

As I started it up this evening, baring in mind I did all the stuff above a couple of days ago, NOD32 went yellow and popped up saying it had found a probable TSR.BOOT virus in the MBR sector of the disk and was unable to clean. Having just done a scan of C:, here are the results:



Re-install of Windows needed? Or could it just be a false positive because of the stuff I did to fix the MBR before (I've done it at least once before that as well, ages ago when messing about with an XP dual-boot thingy)?

Google gives mixed results for this issue and my internetz is currently being a complete wotsit so it's taking forever to search...

I would re-install Windows, but it's a bit of a pain in the arse if I don't actually have to do it. HAAAALLLP! D: please Oh and sorry for the unnecessarily lengthy post

I would attempt scanning using a different antivirus. That way you can be sure whether this is a false positive or not?

There are plenty of free online scanners/ im sure you could "acquire" one

Originally Posted by 1mm3

I would attempt scanning using a different antivirus. That way you can be sure whether this is a false positive or not?

There are plenty of free online scanners/ im sure you could "acquire" one

Try the windows free anti-virus, its better than when i had AVG before!

That'll teach you to always have an image of a fresh install handy, so formatting isn't a bastard. Bite the bullet and do a full format, then make an image. Or take off and nuke it from orbit; it's the only way to be sure. /Hicks

OK, cheers guys. I'll do a fresh install and take an image this time. Then again, I've just done another scan with NOD32 and it hasn't found anything, which is a bit odd, but I'll reinstall anyway just to be sure.