Hi ESET Peeps!
I've been having a strange issue the past week. I'm an administrator for our ESET Endpoint service and noticed that I had a PC showing up as infected with a MBR infection known as "Ripper". I've scanned and checked the PC but did not find anything out of the ordinary while physically on it. Yet, everyday I keep getting the same warning, Ripper keeps showing up everyday in threes, found in file:///1 but there's nothing that shows up when sending out a clean request.
I've investigated what this virus might be about, but I can't find anything that's modern. The last know "Ripper" seems to be back from 1993 and mainly attacked floppy drives. (which this PC does not have what so ever.)
I'm starting to believe this might be a false positive. It's happening on a Windows 7 Pro machine, and the only conclusion I currently have is that it's finding the HP recovery partitions as a possible infection? What can I do to either confirm the infection and clean it, or have this PC ignore the error?