Tom's Guide | Tom's Hardware | Tom's Games
![]() |
![]() |
![]() |
HELLLO EVERYBODY,
i have a virus in my system that to in the boot sector.the virus is-WYX.it makes the system very slow and the system hangs frequently.my BOOT.INI file is also invalid now.my operating system is windows 2000-NT.
please suggest me the best way to remove the virus withouy formating the system.thanking you
manjit

fdisk /mbr
this creates a new master boor record, this will not harm your os but might get rid of the virus,
Stu

The only problem with that solution is that ntldr gets wiped as well.If you do the fdisk /mbr you will then need to boot with the W2K CD and select repair and then pick the option to repair boot.

Boot Sector Recovery
Boot sector recovery in most cases is rather simple and can be done with the help of DOS SYS command (for boot sectors of diskettes and logical disks of hard drives) or with the help of the FDISK /MBR command (Master Boot Record of hard drives). Of course one might use the FORMAT command, but virtually in all cases SYS will do.
One should keep in mind, that sector recovery must be done only under the condition of absence of virus in RAM. If RAM copy of virus has not been disarmed, then it is quite possible, that the virus will repeatedly infect diskette or hard drive after the removal of viral code (even if you use the FORMAT utility).
Also you should be very careful while using FDISK /MBR. This command rewrites completely the code of the system loader routine and does not change the Disk Partition Table. FDISK /MBR is a 100 percent successful cure for most boot viruses, however, if the virus encrypts the Disk Partition Table or uses nonstandard methods of infection, FDISK /MBR may result in complete loss of information on disk. Therefore before running FDISK /MBR make sure that the Disk Partition Table is intact. To do so boot to DOS from an uninfected diskette and check the validity of this Table (the most suitable program for this purpose is Norton Disk Editor).
But if sector recovery with the help of SYS/FDISK is impossible, usually figure out the operating algorithm of the virus, find the original boot/MBR sector on disk and move it to the proper place (Norton Disk Editor or AVPUTIL suit for this best). Doing that you should constantly keep in mind that when rewriting system loaders you must be extra careful, because incorrect adjustment of the MBR or boot sector may result in total loss of all the information on disk(s).

Dear sir
One doubt is there that is . If the system is running and at the time of booting it show that error of boot sector virus and if I do fdisk /mbr,what will happen with the operating system wether it will boot properly
or not.deep

dear friend.
I am facing with a virus problem in my system in memory boot sector i.e. polyboot-b.
How to get rid of it . I have tested fdisk /mbr. But it did't work to sortout this problem.
Kindly help me for this.
deep chandra pujari

sir,
my windows nt server effected with wyx boot virus, system partition have ntfs partition.
i tried with mcafee and fdisk/mbr command also, but still my problem not solved.kindly help me for this.regards,
raju

Sir,
My windows was attacked by Virus-WYX.
I really try to use other anti-virus like mcafee, avg but I still get this problem.
So, I would like you to help me for this problem.
Sincerely,
Rithy

Can someone please help me on how to remove the WYX virus on my PC!! Pls. reply to my Email Address A.S.A.p.!! Thanx!!

Pak ..... kulo nyuwun tulung, Hardisk notebook kulo kenging hama WYX.
Peripun carane ngilangi virus menika.
Anti viruse napa mawon.
Sak derenge matur nuwun.....

hi everybody
well i am also having the same problem .
i have a win2k advanced server and the MBR is infected with WYX virus.
can anyone help me out in solving this problem i did FDISK/MBR but this didn't solve the problem

![]() |
![]() |
![]() |

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.
| Ads by Google |