MBR Virus

The two of the PCs (two different makes and models) got hit with the same nasty MBR (main boot disk virus). I know it was a MBR virus because, after much troubleshooting, restoring the MBR fixed the problem: I was getting “fake” memory errors. Does Avast check the MBR for boot viruses? I was running Avast at the time? What should I do to stop it from happening again? It must be somewhere on these machines & could reload (the virus) but Avast isn’t picking it up? I tried another AV (Norton) & it didn’t find it either?

Sorry if the question is stupid but are you using dual boot? Lilo or GAG or any other multiply boot application?
I suppose Norton and avast were never installed as the same time in this computer…
Why are you so sure it’s a MBR virus?

Thank you for your reply. One PC had Avast and the the other had Norton running when the MBR virus attacked.

I am never sure about things in life, but when I repaired (restored to the original state) the MBR on both PCs, the problem went away - and - the Dell technition (helping fix one of the PCs) said it was a MBR virus.

Both PCs are nor running only Avast, but no virus is being detected.

One PC does have dual boot (grub), it dual boots into Windows XP and Susi, the problem only happened in XP. And the other machine only has XP.

Does Avast check the MBR? I am impressed with this free AV, gotta wonder why it’s free though…

“Both PCs are now running Avast”

Yes, it should check… It has a feature to avoid MBR infection checking the presence of floppies and CD while turning off the computer.
See Settings, tab Common

Marketing strategy… Right now, aren’t you so impressed to get the Professional version? :wink:

What about the MBR (the bit that boots before any software is loaded) on the hard drive in my PCs? Does Avast check that MBR? Forgive my Newbie questions please. What should I do if it happens again? Can I submit a copy of the MBR to Avast? I don’t know how but I can follow directs… Thank you.

You’ve give the answer yourself: if avast is a piece of software and MBR is the bit that boots before any software is loaded
Only at BIOS level it’s possible to check that…

You can take an image of your MBR (I’m not sure how to do this…) and Send an email to any of these addresses:
vlk (at) avast.com
rypacek (at) asw.cz

Or upload to the any of these anonymous ftp servers:
ftp://ftp.asw.cz/incoming
ftp://www2.asw.cz/incoming

Please, send more info about the problem too or a link to this thread :wink:

OK, if it happens again, I will FTP ya’ll a copy of my MBR, OK? Will it help? How? One more question please: Is there anything or anyway to protect from or prevent a virus from getting to my MBR (on my hard drive)?

It will help only if avast! could detect the infection ‘before’ it reaches the MBR.

Reply #4 8)

Precious wording, “avast! Evangelist”
God Bless & Thank you,