Tom's Guide | Tom's Hardware | Tom's Games
![]() |
![]() |
![]() |
what happens when i replace my infected HD wif a clean one? i seem to have a memory resident virus or cmos virus w/c i apparently cannot remove. the virus seems to remain after a clean boot from a startup disk and therefore starts corrupting my files. so my question is, if i ever get a brand new HD to replace my infected HD. will the new HD get infected?

tried all types of updated antivirus but only AVG detected it during a quick scan. it says that there has been a change in the Partition Table, MBR. iv even tried replacing the infected HD with a clean one then doing a clean boot and fdisk /mbr but the new HD still got infected! i believe its either i got a memory resident or cmos virus if there ever is such a thing. so is it possible that a brand new HD drive will get infected unless i find a way to remove the virus

Did you check your boot floppy? Boot floppies should be made on a known good clean machine and write protected. Suspicious floppies should not be used in good machines. I bulk erase my floppies if there are of unknown risk.

"iv even tried replacing the infected HD with a clean one then doing a clean boot and fdisk /mbr but the new HD still got infected!"
Clean ?
Did you do a FDISK /MBR then FDISK delete all partitions, create new partition and set active, FORMAT C: /U and reinstall the Win98 operating system ?If so, you can use ZAP which wipes out the first 63 sectors:
http://www.geocities.com/thestarman3/Index.html
The unfortunate truth about FDISK /mbr is that it does not write a new mbr unless the signature bytes are missing. Use a utility like ZAP or MBRTool; http://www.diydatarecovery.nl/ to wipe out the mbr.
YET you did say you used another HD !What are the symptoms of the virus ?
It can't be a memory resident virus .. not possible, very very doubtfull in cmos, possible in eeprom ... very very highly unlikely. For cmos .. remove the battery for 10 minutes, for eeprom; reburn it with a program from the motherboard manufacturer,
tricky and dangerous.Are you sure your boot floppy is clean ?
Write protected ? When did you make it or where did you get it ?Best

*stuff i did
1. made a clean boot disk and did a scan to check it then write-protected disk thereafter.started pc with boot disk then FDISK /MBR then FDISK delete all partitions, create new partition and set active, FORMAT C: /U and reinstall the Win98 operating system
2. downloaded most of the AV's available and updated all of em but no virus shows up except on AVG quick scan. AVG quick scan notices a PARTITION TABLE MBR CHANGE
3. replaced the infected HD with another clean HD then did the 1st step (stated above). as i was installing most of the drivers n programs i got the ff. symptoms of the virus like invalid page fault errors and corrupted files
_____________________________________________*symptoms*
1. corrupted files & downloads (including zipped archives)
2. installation errors
3. sometimes registry messes up and im back to startERROR MSGS I USUALLY GET ARE INVALID PAGE FAULTS LIKE THIS
IEXPLORE caused an invalid page fault in
module <unknown> at 0000:5ad699e3.
Registers:
EAX=0058a1dc CS=0187 EIP=5ad699e3 EFLGS=00010246
EBX=0058a264 SS=018f ESP=0058a1c0 EBP=0058a220
ECX=0157b960 DS=018f ESI=03c74fa4 FS=35bf
EDX=0058a24c ES=018f EDI=0058a26c GS=0000
Bytes at CS:EIP:_____________________________________________
so i was wondering if theres something wrong with my pc hardware excluding the HD or is it just the HD having problems? i was thinking of gettin a brand new HD but im having second thoughts since it may be infected or my pc hardware may be the cause of al this

Hi all
prior post at http://www.computing.net/windows95/wwwboard/forum/156200.htmlbesides avg saying the mbr was changed, do you have any other problems? are you duel booting?
as jubalsams says it can not be a reident memory vires, when you turn off the comp all memory data is lost.
You could have a bad memory card causeing AVG to think there was a MBR change, due to data couruption in memory.

nope no dual booting here. btw b4 i forget there are instances when certain *.dll's are modified also causing some programs not to work. AVG also detect those dll's when they are modified

![]() |
![]() |
![]() |

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.
| Ads by Google |