{"id":4074,"date":"2026-06-08T18:02:06","date_gmt":"2026-06-08T15:02:06","guid":{"rendered":"https:\/\/support.withsecure.com\/en\/?post_type=support_article&#038;p=4074"},"modified":"2026-06-08T18:02:06","modified_gmt":"2026-06-08T15:02:06","slug":"what-to-do-if-malicious-code-has-been-found-in-an-mbr-file","status":"publish","type":"support_article","link":"https:\/\/support.withsecure.com\/jp-ja\/support-articles\/what-to-do-if-malicious-code-has-been-found-in-an-mbr-file\/","title":{"rendered":"What to do if malicious code has been found in an MBR file"},"content":{"rendered":"<h3>Issue:<\/h3>\n<p>Malicious code has been found in MBR file (Master Boot Record), how to proceed for further investigation.<\/p>\n<h3>Resolution:<\/h3>\n<p>Collect the MBR log from the infected machine for further investigation whether it is valid infection or false positive from F-Secure product.<\/p>\n<p><strong>Log Collection Instructions:<\/strong><\/p>\n<ol>\n<li>Install Sector Inspector &quot;secinspect.msi&quot; on the infected machine and note the installation directory. Download link: <a class=\"external-link\" href=\"https:\/\/www.microsoft.com\/en-us\/download\/details.aspx?id=19470\" target=\"_blank\" rel=\"noopener\">https:\/\/www.microsoft.com\/en-us\/download\/details.aspx?id=19470<\/a><\/li>\n<li>Locate installation directory C:\\Program Files\\Windows Resource Kits\\Tools or C:\\Program Files (x86)\\Windows Resource Kits\\Tools<\/li>\n<li>Execute &quot;secinspect.exe&quot; using cmd with the following argument. secinspect.exe &gt; &lt;log name&gt;MBR.log<\/li>\n<li>Collect &quot;&lt;log name&gt;MBR.log&quot; that was generated<\/li>\n<li>Once the log has been collected, you can uninstall the tool using the same installer file &quot;secinspect.msi&quot;\u00a0and choose uninstall option<\/li>\n<\/ol>\n<p>Once &quot;&lt;log name&gt;MBR.log&quot; was collected, please submit through the Submit a Sample service portal (<a href=\"https:\/\/www.f-secure.com\/en\/web\/labs_global\/submit-a-sample\" target=\"_blank\" rel=\"noopener\">https:\/\/www.f-secure.com\/en\/web\/labs_global\/submit-a-sample<\/a>) for further investigation. Select <b>I want to give more details about this sample and to be notified of the analysis results<\/b>. Malware team will investigate the log and give remediation instructions for further clean up.<\/p>\n<p>\u00a0<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Malicious code has been found in fMBR file (Master Boot Record)<br \/>\nWhat can be done then?<\/p>\n","protected":false},"template":"","support_article_product":[104],"class_list":["post-4074","support_article","type-support_article","status-publish","hentry"],"acf":{"source_foreign_id":"000005620","source_version":3,"source_system":"salesforce","source_date_updated":"2026-06-08 15:02:06","import_hash":"8c49a70c4d134845edeff3052d2e8d1faf492ee1","vanilla_article_id":29651,"vanilla_url":"https:\/\/community.withsecure.com\/en\/kb\/articles\/29651-what-to-do-if-malicious-code-has-been-found-in-an-mbr-file","vanilla_kb_id":30,"vanilla_category_id":106,"machine_translated":false,"reactions_helpful_yes":0,"reactions_helpful_no":0},"_links":{"self":[{"href":"https:\/\/support.withsecure.com\/jp-ja\/wp-json\/wp\/v2\/support_article\/4074","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/support.withsecure.com\/jp-ja\/wp-json\/wp\/v2\/support_article"}],"about":[{"href":"https:\/\/support.withsecure.com\/jp-ja\/wp-json\/wp\/v2\/types\/support_article"}],"wp:attachment":[{"href":"https:\/\/support.withsecure.com\/jp-ja\/wp-json\/wp\/v2\/media?parent=4074"}],"wp:term":[{"taxonomy":"support_article_product","embeddable":true,"href":"https:\/\/support.withsecure.com\/jp-ja\/wp-json\/wp\/v2\/support_article_product?post=4074"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}