AOA Forums AOA Forums AOA Forums Folding For Team 45 AOA Files Home Front Page Become an AOA Subscriber! UserCP Calendar Memberlist FAQ Search Forum Home


Go Back   AOA Forums > Hardware > CRASHED!

CRASHED! A topic for SEVERE and immediate Hardware and Operating System FAILURES. We will try to get you up again. NOT for Optimization questions!


Reply
 
LinkBack Thread Tools Rate Thread
  #1 (permalink)  
Old 23rd November, 2002, 12:50 AM
kat's Avatar
kat kat is offline
Member
 
Join Date: September 2001
Location: belding MI
Posts: 2,166

boot sector virus

not realy a crash the pc is working just fine except the desk top items flash once and a while

My sons pc has been acting a little strange so I booted from the Norton cd to do a virus scan and it will not complete the scan, it says its finished in 1 second and in manual mode it will only scan 28 files

When I use navdx/error help It reports the following

No errors occurred and no viruses were found
A virus was found in memory
An internal program error occurred
One or more viruses were found in the master boot record/boot sector or files
Navdx self check failed it may be infected or damaged
Ctrl or ctrl-break was used to interrupt the scan

if he has a boot sector virus would it just be easer to just reformat??

whats the next step?
__________________
AOA Team fah

fer 47 years ive been seeking a balance in life
and I’ve been from one end to the other
i may be getting close

Last edited by kat; 23rd November, 2002 at 01:05 AM.
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #2 (permalink)  
Old 23rd November, 2002, 01:04 AM
Allan's Avatar
Member/Contributer
 
Join Date: September 2001
Location: Denmark
Posts: 7,914

I always format if I find a virus in my files.. just in case something is corrupted.. but I'm sure all don't do that.
__________________
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #3 (permalink)  
Old 23rd November, 2002, 02:14 AM
Daniel ~'s Avatar
Chief BBS Administrator
 
Join Date: September 2001
Location: Seattle Wa.
Posts: 45,606

Sounds like Norton may be scanning a CD drive or something, are you sure it's scanning the hard drive?
__________________
"Though all men live in ignorance before mystery,
they need not live in darkness...
Justice is foundation and Mercy ETERNAL
."
DKE

"All that we do is touched by Ocean
Yet we remain on the shore of what we know."
Richard Wilbur

[img]/forum/attachments/random-nonsense/16515-sigs-dan_drag.jpg[/img]
Subscribers! Ask Pitch about a Custom Sig Graphic

Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #4 (permalink)  
Old 23rd November, 2002, 02:18 AM
kat's Avatar
kat kat is offline
Member
 
Join Date: September 2001
Location: belding MI
Posts: 2,166

theres an option in the manual mode to scan all drive's same results
__________________
AOA Team fah

fer 47 years ive been seeking a balance in life
and I’ve been from one end to the other
i may be getting close
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #5 (permalink)  
Old 23rd November, 2002, 02:20 AM
Daniel ~'s Avatar
Chief BBS Administrator
 
Join Date: September 2001
Location: Seattle Wa.
Posts: 45,606

Is Norton installed on his HD?If not Repatriation and reformat. If it's on his HD it should be able to fix it.
__________________
"Though all men live in ignorance before mystery,
they need not live in darkness...
Justice is foundation and Mercy ETERNAL
."
DKE

"All that we do is touched by Ocean
Yet we remain on the shore of what we know."
Richard Wilbur

[img]/forum/attachments/random-nonsense/16515-sigs-dan_drag.jpg[/img]
Subscribers! Ask Pitch about a Custom Sig Graphic


Last edited by Daniel ~; 23rd November, 2002 at 02:25 AM.
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #6 (permalink)  
Old 23rd November, 2002, 02:52 AM
kat's Avatar
kat kat is offline
Member
 
Join Date: September 2001
Location: belding MI
Posts: 2,166

yes i upgraded to norton 2003 when i upgraded his pc to xp i read today that most boot sector virus are tranmitted with a floppy from an infected machine...god only know what he has put in there.. the scan runs just fine on my other machines

after running the program several times and trying all the options it also will not make a log file it simply will not scan the hdd

ive also ran the utilitys in safe mode bypasing his startup files and it dosnt find any problems


stumped
__________________
AOA Team fah

fer 47 years ive been seeking a balance in life
and I’ve been from one end to the other
i may be getting close
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #7 (permalink)  
Old 23rd November, 2002, 03:26 AM
SteveI's Avatar
AOA Staff
Tetris Champion
 
Join Date: September 2001
Location: NJ
Posts: 6,971

Norton should have an option to create a bootable floopy with a dos based scan.. Do this on one of your clean machines. Then write-protect the floppy, and boot with it to the infected machine.

From dos mode, you should be able to clean the bootsector. AFAIK, reformatting will not work on bootsector viruses.

First rule of cleaning those buggers.. try to boot from a clean drive, and if possible run programs that are known to be clean. Some viruses can block removal attemps by corrupting the virus sw.
__________________
AOA Team fah
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #8 (permalink)  
Old 23rd November, 2002, 03:36 AM
Repo Man's Avatar
Member
 
Join Date: September 2002
Location: Chico, CA
Posts: 513
Send a message via ICQ to Repo Man Send a message via AIM to Repo Man

From what I've heard, the best way to get rid of an MBR virus is to do a low level format. If you're not worried about any info on the drive, or reinstalling the OS, then I think an LLF is your best bet. Go to the HD manufacturers site and get their format utility, and you ought to be virus free.
__________________
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #9 (permalink)  
Old 23rd November, 2002, 11:03 AM
Daniel ~'s Avatar
Chief BBS Administrator
 
Join Date: September 2001
Location: Seattle Wa.
Posts: 45,606

A re-partition and reformat should get rid of anything...I think (?)

BTW I Think Steve is right, Try a Dos scan.
__________________
"Though all men live in ignorance before mystery,
they need not live in darkness...
Justice is foundation and Mercy ETERNAL
."
DKE

"All that we do is touched by Ocean
Yet we remain on the shore of what we know."
Richard Wilbur

[img]/forum/attachments/random-nonsense/16515-sigs-dan_drag.jpg[/img]
Subscribers! Ask Pitch about a Custom Sig Graphic

Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #10 (permalink)  
Old 23rd November, 2002, 03:59 PM
kat's Avatar
kat kat is offline
Member
 
Join Date: September 2001
Location: belding MI
Posts: 2,166

im using the norton cd as a start up disk booting to dos and doing the scan from there, but some how the little bugger is able to stop the full scan buy using the comand ctrl/-break

i read yesterday the the dos comand fdisk/mbr used to be efective at erasing boot scector vurili but that comand dosnt work in xp

is there a new comand that works with xp and does the same thing???
__________________
AOA Team fah

fer 47 years ive been seeking a balance in life
and I’ve been from one end to the other
i may be getting close
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #11 (permalink)  
Old 23rd November, 2002, 07:46 PM
Repo Man's Avatar
Member
 
Join Date: September 2002
Location: Chico, CA
Posts: 513
Send a message via ICQ to Repo Man Send a message via AIM to Repo Man

Kat, take a look at this site: http://www.itechs-systems.com/articles/a5.htm
It covers all angles of attack I think. Good luck!
__________________
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #12 (permalink)  
Old 24th November, 2002, 01:58 AM
cloasters's Avatar
Asst. BBS Administrator
 
Join Date: September 2001
Location: Location, Location
Posts: 21,956

I've seen a couple of thumb's-downs on Norton 2003. A Win98SE boot disk will let you fdisk/mbr, repartition and reformat. AFAIK, the closest thing to a low level format an end user would do is to write all zero's to the HDD.

A virus in Memory is unsettling. I wonder if removing the DIMM's from the mainboard will kill it?
__________________
When the world will be better.
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #13 (permalink)  
Old 24th November, 2002, 02:00 AM
kat's Avatar
kat kat is offline
Member
 
Join Date: September 2001
Location: belding MI
Posts: 2,166

Quote:
Originally posted by Repo Man
Kat, take a look at this site: http://www.itechs-systems.com/articles/a5.htm
It covers all angles of attack I think. Good luck!

thanks repo man!!!

this was just what i was looking for
__________________
AOA Team fah

fer 47 years ive been seeking a balance in life
and I’ve been from one end to the other
i may be getting close
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #14 (permalink)  
Old 24th November, 2002, 02:12 AM
kat's Avatar
kat kat is offline
Member
 
Join Date: September 2001
Location: belding MI
Posts: 2,166

Quote:
Originally posted by cloasters
I've seen a couple of thumb's-downs on Norton 2003. A Win98SE boot disk will let you fdisk/mbr, repartition and reformat. AFAIK, the closest thing to a low level format an end user would do is to write all zero's to the HDD.

A virus in Memory is unsettling. I wonder if removing the DIMM's from the mainboard will kill it?
nice idea...

but if im not mistaken.. the memory is cleared after a cold boot?

i need to find a dos comand that will kill the mbr
__________________
AOA Team fah

fer 47 years ive been seeking a balance in life
and I’ve been from one end to the other
i may be getting close
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #15 (permalink)  
Old 24th November, 2002, 02:19 AM
SteveI's Avatar
AOA Staff
Tetris Champion
 
Join Date: September 2001
Location: NJ
Posts: 6,971

Quote:
Originally posted by kat
....but some how the little bugger is able to stop the full scan buy using the comand ctrl/-break....
That's a nasty bugger.
If it's smart enough to stop a virus scan in it's tracks, I doubt it would let itself be wiped out by a reformat.

I still think creating a bootable disk with a dos based version is your best bet. Before you do tho, make sure one of your other machines is fully updated with the latest dats and updates. Maybe you'll get lucky and norton has figured out a way to get at that virus.
__________________
AOA Team fah
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #16 (permalink)  
Old 24th November, 2002, 02:27 AM
kat's Avatar
kat kat is offline
Member
 
Join Date: September 2001
Location: belding MI
Posts: 2,166

Quote:
Originally posted by SteveI


That's a nasty bugger.
If it's smart enough to stop a virus scan in it's tracks, I doubt it would let itself be wiped out by a reformat.

I still think creating a bootable disk with a dos based version is your best bet. Before you do tho, make sure one of your other machines is fully updated with the latest dats and updates. Maybe you'll get lucky and norton has figured out a way to get at that virus.
im begining to think the same way steveI.....

perhaps this drive is headed for the trash???

my brother has two XP machines at work, i think i will hit him up tomorrow for a clean boot disk...i have found several small virus scans that will fit on a floppy
__________________
AOA Team fah

fer 47 years ive been seeking a balance in life
and I’ve been from one end to the other
i may be getting close
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #17 (permalink)  
Old 24th November, 2002, 02:40 AM
Daniel ~'s Avatar
Chief BBS Administrator
 
Join Date: September 2001
Location: Seattle Wa.
Posts: 45,606

See the last two posts in "Our Favorite Links" Topic. You can download a boot disk from there":O}
__________________
"Though all men live in ignorance before mystery,
they need not live in darkness...
Justice is foundation and Mercy ETERNAL
."
DKE

"All that we do is touched by Ocean
Yet we remain on the shore of what we know."
Richard Wilbur

[img]/forum/attachments/random-nonsense/16515-sigs-dan_drag.jpg[/img]
Subscribers! Ask Pitch about a Custom Sig Graphic

Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #18 (permalink)  
Old 24th November, 2002, 04:37 AM
Holst's Avatar
Member
 
Join Date: September 2001
Location: Leics UK
Posts: 4,528

I think your best bet will be a good old fasioned zero writing.

Head over to the drive manufacturers site and download there disk utility. that will run from DOS and will let you write zero's to the entire drive.

If you just reformatt dan you might not clear the boot sector, where as writing zero's will "theoretically" get everything.
__________________
No longer Epox Tech.

Best of luck in the future all my friends.
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #19 (permalink)  
Old 24th November, 2002, 07:06 AM
Daniel ~'s Avatar
Chief BBS Administrator
 
Join Date: September 2001
Location: Seattle Wa.
Posts: 45,606

Wouldn't a re partition take out everything?
__________________
"Though all men live in ignorance before mystery,
they need not live in darkness...
Justice is foundation and Mercy ETERNAL
."
DKE

"All that we do is touched by Ocean
Yet we remain on the shore of what we know."
Richard Wilbur

[img]/forum/attachments/random-nonsense/16515-sigs-dan_drag.jpg[/img]
Subscribers! Ask Pitch about a Custom Sig Graphic

Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #20 (permalink)  
Old 25th November, 2002, 01:54 AM
cloasters's Avatar
Asst. BBS Administrator
 
Join Date: September 2001
Location: Location, Location
Posts: 21,956

Quote:
Originally posted by Daniel ~
Wouldn't a re partition take out everything?
You'd think so. But maybe simply writing a new VFAT table isn't the same as rewriting the boot sector. I don't know if writing all zero's to a drive "wipes clean" the boot sector. This is one nasty viral infection, for sure.

I also don't know if a cold boot "zeroizes" the RAM. It's volatile, but does the "trickle power" from the CMOS battery hold onto a virus in Memory? I would surely hope that removing RAM from a box will kill any virus in it.
__________________
When the world will be better.
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Reply



Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools
Rate This Thread
Rate This Thread:

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


Similar Threads
Thread Thread Starter Forum Replies Last Post
New virus? Betty CRASHED! 62 30th November, 2012 10:28 AM
Dark Sector Interview [PS3 + Xbox 360] raphael2040 GAMES! OH YEAH! 1 4th June, 2007 09:20 PM
Apple Boot Camp (Dual-Boot) Impressions fantomfreq OS, Software, Firmware, and BIOS 0 28th September, 2006 04:39 AM
Computer will not boot if floppy of HD is first boot device patrizio EPoX MotherBoards 4 20th July, 2003 01:48 PM
New Bios.........Boot Sector? cpufast EPoX MotherBoards 2 21st December, 2001 05:13 AM


All times are GMT +1. The time now is 05:47 AM.


Copyright ©2001 - 2010, AOA Forums
Don't Click Here Don't Click Here Either

Search Engine Friendly URLs by vBSEO 3.3.0