Computing.Net > Forums > Disk Operating System > Help Please! Virus in boot sector

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.

Help Please! Virus in boot sector

Reply to Message Icon

Name: Shannon
Date: June 17, 2001 at 21:07:03 Pacific
Comment:

I just bought a used 386 pc from a yard sale which is working yesterday. I have an old dos version of Norton Antivirus which I installed on the 386. Anyway, I ran Norton & this is what it said,

Master boot record of drive 1 is infected by the NYB virus, attemping to repair the infected boot record. This process is non-reversible. Do you wish to continue? I answered yes. About 10 seconds later it said "Unable to repair master boot record. Computer still infected. I searched on the Net & it said do fdisk /mbr. I did and Norton is still saying the virus is there. So I did fdisk, deleted all primary partitians, set active partitian & then formatted & reinstalled dos. Ran Norton. Now says this virus in in memory. Can someone please help me? I know a newer version of Norton would get rid of it because I ran Norton on an infected floppy from my new pc & it got rid of it. But this pc does not have a cd-rom drive. Also when the virus was reported it told me to insert my rescue disk, which I did & my computer restarted. But then Norton refused to load. It will only load from the C: drive. Can someone help me out. I got it for my little boy.

Thanks!



Sponsored Link
Ads by Google

Response Number 1
Name: jboy
Date: June 18, 2001 at 00:37:41 Pacific
Reply:


Shannon, you may have 'infected' your boot disk (and others!), which would pass the virus back to the new boot sector on your hard drive. If so, you'll need a clean boot disk, but make sure to open up the 'write protect' button on the floppy so that the floppy stays clean (uninfected). In fact, all your important backups, boot disks and rescue disks, anti-virus etc should be protected to prevent this kind of infection.
With a clean, write-protected boot disk, you should be able to repair the Master Boot Record (MBR) and remove the virus again.
Next it wouldn't hurt to get a more up-to-date antivirus program, perhaps F-PROT, and check your floppies as well.




0

Response Number 2
Name: Shannon
Date: June 18, 2001 at 05:42:20 Pacific
Reply:

Thanks for your help. I downloaded F-PROT & when I ran it it said I needed an updated version. It still scanned the pc & reported no viruses. I then downloaded Invircible from www.invircible.com for dos. It reported an error saying "memory stealing detected" & then told me to reboot the computer. After it rebooted it reported,

self integrity & decoy test passed
master boot record is intact
boot sector is intact
Validating c:\dos, all files matched their recorded signatures.

I also ran chkdsk & it reports 655,360 total bytes memory. I then reinstalled Norton & ran it. Is still telling me "master boot record on drive 1 is infected with the NYB virus" Items scanned C:-D. Master boot records scanned 2, infected 1. I am still confused because I thought the virus scanner I downloaded cleaned it. Is there anyway for sure for me to know this virus is gone? I know eventually If I dont get rid of it I will not be able to access the HD. I also did write protect all floppy disks after scanning them with my new computer.


0

Response Number 3
Name: Michael
Date: June 18, 2001 at 08:16:51 Pacific
Reply:

Boot with a non infected boot disk and issue this command.

fdisk /mbr

Hopefully that will clean off the virus on the boot record.

Hope that helps,
-Michael


0

Response Number 4
Name: tsuji
Date: June 18, 2001 at 09:00:47 Pacific
Reply:

In the Bios Advanced setup, set the Boot Virus Detection (or similarly named item) to Disabled, see if it irons the problem out. It could be a fault-alarm.


0

Response Number 5
Name: xb
Date: June 18, 2001 at 09:52:36 Pacific
Reply:


perhaps it's your copy of norton that's infected?


0

Related Posts

See More



Response Number 6
Name: tsuji
Date: June 18, 2001 at 10:28:46 Pacific
Reply:

correction : "fault-alarm", I mean "false alarm".

Furthermore, chkdsk reports 655,360 Bytes. It could be another indicator of it.


0

Response Number 7
Name: Shannon
Date: June 20, 2001 at 04:26:30 Pacific
Reply:

I got ahold of Norton Antivirus 4.0 for dos/3.1/95/98 on a sales rack at Wal-Mart. Was on floppies & cdrom. Still old, but not as old as my other version. And you can download the updates for dos which was great. Anyway, I installed it, downloaded the updates from Norton, booted with a clean disk, ran Norton, & guess what, same problem. Maybe it is a false alarm. I am leaving a test disk in the drive purposely to see if it will become infected. So far, after 2 days, it has not. I have yet to try to turn off, in cmos settings the virus protection feature because I cannot get into the bios which is Phoenix. Anyone know the keys to press? If it is on, that might be the problem.


0

Response Number 8
Name: jboy
Date: June 20, 2001 at 23:04:16 Pacific
Reply:


Sure, Phoenix BIOS is accessed by:
CTRL-ALT-S
at the boot or from the DOS prompt
Sometimes Norton AV and others will have different parameters to adjust the scan,
Try typing NAVDX /? (or whatever starts the AV scan).
It DOES sound like a false alarm, not that unusual, but worth keeping an eye on.
You may not even have an anti-virus option in the BIOS - not all 386's had it.




0

Response Number 9
Name: Joshua175
Date: June 28, 2001 at 23:06:29 Pacific
Reply:

try to use a clean boot diskette(DOS)
How?
Format a new diskette using a clean source system. exactly not on your infected PC.
if finished, try to boot first using your clean boot diskette. go to BIOS change the boot sequence to (A, C drive) then scan. try it if it helps your problem.


0

Sponsored Link
Ads by Google
Reply to Message Icon






Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Disk Operating System Forum Home


Sponsored links

Ads by Google


Results for: Help Please! Virus in boot sector

Eternal Virus in my HD www.computing.net/answers/dos/eternal-virus-in-my-hd/1115.html

Hard Drive/Windows smearing www.computing.net/answers/dos/hard-drivewindows-smearing/961.html

HOW TO CLEAN VIRUS IN MASTER BOOT SECTOR www.computing.net/answers/dos/how-to-clean-virus-in-master-boot-sector/8032.html