TSR.BOOT Virus found by NOD32 antivirus

Hi,
I found TSR.BOOT Virus in boot sector 0 , Enod32 could not able to delete it, have tried in safe mode also.
Actual message is
“Startup scanner active boot sector of the 0.physical disk probably unknown TSR.BOOT virus unable to clean”
I had try SDfix tool also, still the virus is there.
Can anyone please suggest me best way to remove this virus.
regards.
Answer #1
aman00150 replied: Hi,
I found TSR.BOOT Virus in boot sector 0 , Enod32 could not able to delete it, have tried in safe mode also.
Actual message is
"Startup scanner active boot sector of the 0.physical disk probably unknown TSR.BOOT virus unable to clean"
I had try SDfix tool also, still the virus is there.
Can anyone please suggest me best way to remove this virus.
regards.
get the latest Hirens boot disk, boot with that and use the tools on it.
that is pretty much guaranteed.
Answer #2
Thanks all for your help, but it seems i have finally broken this virus back. Let me start with the facts, this is one nasty virus to remove. If a flash, floppy disk or hardrive is infected with this virus. You will have a sit of hardrive removing this virus. PLEASE REMEBER THE FOLLOWING. The virus copies to any disk that has a boot sector, so if you put a hardrive or flash drive with the virus in your pc it will become infected. THERE IS NOT AN ANTIVIRUS PROGRAM that can remove the virus. If you go nod 32 or Avast webstie, the basterds will tell what this virus does. THEY DO NOT, I REPEAT THEY DO NOT HAVE ANY REMOVAL TOOL TO REMOVE THIS VIRUS AND DO NOT KNOW HOW TO REMOVE THE VIRUS. They won't tell you to format the hardrive, go use an other virus protection cause that would just mean that they are stumped on how to remove it. If you use my way you can keep your data, not so sure about pastel, but your movies, music, word documents sould still be there. Yes i still have all my data minus firefox loosing my bookmarks but that is a small prys to pay for getting rid of this virus. So here is how you remove the TSR.BOOT virus, aka HURRI virus if you have AVAST. If you have an xp cd for your windows, but boot from the cd. When you get to the option to install windows or go into Recovery Console. Press R to go into Recovery Console. It will say something like. 1.c:/windows something something. What you do it press 1. It will then ask for a password. If you didn't put a password on your windows, then you should just log in by pressing enter. If you did give your windows a password, then you should use your passwordto log in. Now when you have logged in, it should now say (C:/WINDOWS/). Now what you do is type in (FIXBOOT) AND PRESS ENTER. It should give an option if really want to do this, just answer y then it skould be done. Now type in (FIXMBR) AND PRESS AND ENTER. You should get the same option also just enter the letter y and press enter. Type (FIXBOOT) and enter again. After you have typed in these 3 steps restart your pc. WARNING DO NOT RESTART THE PC AND LOG INTO WINDOWS VIRUS WILL STILL BE THERE. BEST OPTION WOULD BE TO FOLLOW THE ABOVE STEPS THEN SWITCH OFF YOUR PC WHEN IT IS DONE. Now boot from the boot cd, instead of going into the recovery console press enter. Now it will give you the option to repair windows do what it says. PRESS R TO REPAIR WINDOWS ANYTHING OTHER THEN YOU WILL INSTALL WINDOWS OVER YOUR DATA. Be very sure to repair your windows. Now i have done this one 2 pc's. One with nod32 and Avast, Both do not see the virus anymore and both still has there data on it. Post comments if this has helped you.
Answer #3
I remember the kaspersky removal tool could remove it.\
Plus, it’s free!
Answer #4
You should be able to rewrite the boot sector using the Windows 7 Install disk as shown in Gjoksi’s post..
(Assuming you have Windows 7).
Note that if you have been using Windows Loader by Daz, you will need to rerun it after you have fixed Windows..
Answer #5
great thx to all, i will try these steps….cheers