Computing.Net > Forums > Windows 2000 > remove boot sector virus-WYX

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.

remove boot sector virus-WYX

Reply to Message Icon

Name: manjit saran
Date: January 12, 2002 at 02:56:20 Pacific
Comment:

HELLLO EVERYBODY,

i have a virus in my system that to in the boot sector.the virus is-WYX.it makes the system very slow and the system hangs frequently.my BOOT.INI file is also invalid now.my operating system is windows 2000-NT.

please suggest me the best way to remove the virus withouy formating the system.

thanking you
manjit



Sponsored Link
Ads by Google

Response Number 1
Name: stu
Date: January 12, 2002 at 08:51:22 Pacific
Reply:

fdisk /mbr

this creates a new master boor record, this will not harm your os but might get rid of the virus,

Stu


0

Response Number 2
Name: shovel204
Date: January 12, 2002 at 16:36:07 Pacific
Reply:

The only problem with that solution is that ntldr gets wiped as well.If you do the fdisk /mbr you will then need to boot with the W2K CD and select repair and then pick the option to repair boot.


0

Response Number 3
Name: Human
Date: March 18, 2002 at 10:47:18 Pacific
Reply:

Boot Sector Recovery

Boot sector recovery in most cases is rather simple and can be done with the help of DOS SYS command (for boot sectors of diskettes and logical disks of hard drives) or with the help of the FDISK /MBR command (Master Boot Record of hard drives). Of course one might use the FORMAT command, but virtually in all cases SYS will do.

One should keep in mind, that sector recovery must be done only under the condition of absence of virus in RAM. If RAM copy of virus has not been disarmed, then it is quite possible, that the virus will repeatedly infect diskette or hard drive after the removal of viral code (even if you use the FORMAT utility).

Also you should be very careful while using FDISK /MBR. This command rewrites completely the code of the system loader routine and does not change the Disk Partition Table. FDISK /MBR is a 100 percent successful cure for most boot viruses, however, if the virus encrypts the Disk Partition Table or uses nonstandard methods of infection, FDISK /MBR may result in complete loss of information on disk. Therefore before running FDISK /MBR make sure that the Disk Partition Table is intact. To do so boot to DOS from an uninfected diskette and check the validity of this Table (the most suitable program for this purpose is Norton Disk Editor).

But if sector recovery with the help of SYS/FDISK is impossible, usually figure out the operating algorithm of the virus, find the original boot/MBR sector on disk and move it to the proper place (Norton Disk Editor or AVPUTIL suit for this best). Doing that you should constantly keep in mind that when rewriting system loaders you must be extra careful, because incorrect adjustment of the MBR or boot sector may result in total loss of all the information on disk(s).


0

Response Number 4
Name: Chandara
Date: March 22, 2002 at 02:31:35 Pacific
Reply:

Dear sir
One doubt is there that is . If the system is running and at the time of booting it show that error of boot sector virus and if I do fdisk /mbr,what will happen with the operating system wether it will boot properly
or not.

deep


0

Response Number 5
Name: deep Chandar
Date: March 22, 2002 at 02:35:26 Pacific
Reply:

dear friend.
I am facing with a virus problem in my system in memory boot sector i.e. polyboot-b.
How to get rid of it . I have tested fdisk /mbr. But it did't work to sortout this problem.
Kindly help me for this.
deep chandra pujari


0

Related Posts

See More



Response Number 6
Name: dvb raju
Date: March 22, 2002 at 21:27:53 Pacific
Reply:

sir,

my windows nt server effected with wyx boot virus, system partition have ntfs partition.
i tried with mcafee and fdisk/mbr command also, but still my problem not solved.kindly help me for this.

regards,
raju


0

Response Number 7
Name: rithy
Date: March 26, 2002 at 06:20:53 Pacific
Reply:

Sir,

My windows was attacked by Virus-WYX.
I really try to use other anti-virus like mcafee, avg but I still get this problem.
So, I would like you to help me for this problem.
Sincerely,
Rithy


0

Response Number 8
Name: omar
Date: March 28, 2002 at 01:21:36 Pacific
Reply:

Can someone please help me on how to remove the WYX virus on my PC!! Pls. reply to my Email Address A.S.A.p.!! Thanx!!


0

Response Number 9
Name: Yudho
Date: April 10, 2002 at 20:57:25 Pacific
Reply:

Pak ..... kulo nyuwun tulung, Hardisk notebook kulo kenging hama WYX.
Peripun carane ngilangi virus menika.
Anti viruse napa mawon.
Sak derenge matur nuwun.....


0

Response Number 10
Name: sunil
Date: May 19, 2002 at 22:37:37 Pacific
Reply:

hi everybody
well i am also having the same problem .
i have a win2k advanced server and the MBR is infected with WYX virus.
can anyone help me out in solving this problem i did FDISK/MBR but this didn't solve the problem


0

Sponsored Link
Ads by Google
Reply to Message Icon






Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Windows 2000 Forum Home


Sponsored links

Ads by Google


Results for: remove boot sector virus-WYX

boot sector virus in windows 2000 www.computing.net/answers/windows-2000/boot-sector-virus-in-windows-2000-/51194.html

boot sector virus www.computing.net/answers/windows-2000/boot-sector-virus-/20164.html

Boot Sector Virus? www.computing.net/answers/windows-2000/boot-sector-virus/13480.html