Tom's Guide | Tom's Hardware | Tom's Games
![]() |
![]() |
![]() |
I just bought a used 386 pc from a yard sale which is working yesterday. I have an old dos version of Norton Antivirus which I installed on the 386. Anyway, I ran Norton & this is what it said,
Master boot record of drive 1 is infected by the NYB virus, attemping to repair the infected boot record. This process is non-reversible. Do you wish to continue? I answered yes. About 10 seconds later it said "Unable to repair master boot record. Computer still infected. I searched on the Net & it said do fdisk /mbr. I did and Norton is still saying the virus is there. So I did fdisk, deleted all primary partitians, set active partitian & then formatted & reinstalled dos. Ran Norton. Now says this virus in in memory. Can someone please help me? I know a newer version of Norton would get rid of it because I ran Norton on an infected floppy from my new pc & it got rid of it. But this pc does not have a cd-rom drive. Also when the virus was reported it told me to insert my rescue disk, which I did & my computer restarted. But then Norton refused to load. It will only load from the C: drive. Can someone help me out. I got it for my little boy.
Thanks!

Shannon, you may have 'infected' your boot disk (and others!), which would pass the virus back to the new boot sector on your hard drive. If so, you'll need a clean boot disk, but make sure to open up the 'write protect' button on the floppy so that the floppy stays clean (uninfected). In fact, all your important backups, boot disks and rescue disks, anti-virus etc should be protected to prevent this kind of infection.
With a clean, write-protected boot disk, you should be able to repair the Master Boot Record (MBR) and remove the virus again.
Next it wouldn't hurt to get a more up-to-date antivirus program, perhaps F-PROT, and check your floppies as well.

Thanks for your help. I downloaded F-PROT & when I ran it it said I needed an updated version. It still scanned the pc & reported no viruses. I then downloaded Invircible from www.invircible.com for dos. It reported an error saying "memory stealing detected" & then told me to reboot the computer. After it rebooted it reported,
self integrity & decoy test passed
master boot record is intact
boot sector is intact
Validating c:\dos, all files matched their recorded signatures.I also ran chkdsk & it reports 655,360 total bytes memory. I then reinstalled Norton & ran it. Is still telling me "master boot record on drive 1 is infected with the NYB virus" Items scanned C:-D. Master boot records scanned 2, infected 1. I am still confused because I thought the virus scanner I downloaded cleaned it. Is there anyway for sure for me to know this virus is gone? I know eventually If I dont get rid of it I will not be able to access the HD. I also did write protect all floppy disks after scanning them with my new computer.

Boot with a non infected boot disk and issue this command.
fdisk /mbr
Hopefully that will clean off the virus on the boot record.
Hope that helps,
-Michael

In the Bios Advanced setup, set the Boot Virus Detection (or similarly named item) to Disabled, see if it irons the problem out. It could be a fault-alarm.

correction : "fault-alarm", I mean "false alarm".
Furthermore, chkdsk reports 655,360 Bytes. It could be another indicator of it.

I got ahold of Norton Antivirus 4.0 for dos/3.1/95/98 on a sales rack at Wal-Mart. Was on floppies & cdrom. Still old, but not as old as my other version. And you can download the updates for dos which was great. Anyway, I installed it, downloaded the updates from Norton, booted with a clean disk, ran Norton, & guess what, same problem. Maybe it is a false alarm. I am leaving a test disk in the drive purposely to see if it will become infected. So far, after 2 days, it has not. I have yet to try to turn off, in cmos settings the virus protection feature because I cannot get into the bios which is Phoenix. Anyone know the keys to press? If it is on, that might be the problem.

Sure, Phoenix BIOS is accessed by:
CTRL-ALT-S
at the boot or from the DOS prompt
Sometimes Norton AV and others will have different parameters to adjust the scan,
Try typing NAVDX /? (or whatever starts the AV scan).
It DOES sound like a false alarm, not that unusual, but worth keeping an eye on.
You may not even have an anti-virus option in the BIOS - not all 386's had it.

try to use a clean boot diskette(DOS)
How?
Format a new diskette using a clean source system. exactly not on your infected PC.
if finished, try to boot first using your clean boot diskette. go to BIOS change the boot sequence to (A, C drive) then scan. try it if it helps your problem.

![]() |
![]() |
![]() |

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.
| Ads by Google |