PC Review


Reply
Thread Tools Rate Thread

Boot sector viruses

 
 
=?Utf-8?B?cXE=?=
Guest
Posts: n/a
 
      8th Nov 2006
Hello, All,

In my computer, the master boot record may be infected with a virus. I have
installed Symantec AntiViurs in my computer. I run a full scan, but no virus
was been found in my computer.

Does anyone know how to detect and clear a boot sector virus?

Thanks in advance,

--Qing

 
Reply With Quote
 
 
 
 
Bill Sanderson MVP
Guest
Posts: n/a
 
      8th Nov 2006
What makes you think this is the case? Have you run root-kit detection
software on your system?

F-secure's trial Blacklight is easy to use. You may need to disable some
antispyware or antivirus products while scanning with it, however.

http://www.f-secure.com/blacklight/



--

"qq" <(E-Mail Removed)> wrote in message
news:EF0172DC-EDB7-4B83-82B7-(E-Mail Removed)...
> Hello, All,
>
> In my computer, the master boot record may be infected with a virus. I
> have
> installed Symantec AntiViurs in my computer. I run a full scan, but no
> virus
> was been found in my computer.
>
> Does anyone know how to detect and clear a boot sector virus?
>
> Thanks in advance,
>
> --Qing
>



 
Reply With Quote
 
=?Utf-8?B?RW5nZWw=?=
Guest
Posts: n/a
 
      8th Nov 2006
Hello Qing,

On what basis do you "suspect" a Boot Sector Infector ?

This is a very small class of viruses that are not found on Today's systems
using NTFS partitions and mere conjecture is not enough.

Boot sector viruses haven't been common for many years and it is extremely
unlikely that you have one.

Can you tell me what antivirus product you are running?

Clean out your temporarily "junk yard"
and then to use a program such as CCleaner and or HDCleaner for a more
thorough cleaning, running in safe mºde. for total cleaning.

Ccleaner - http://www.ccleaner.com
http://www.ccleaner.com/downloadbuilds.asp

Note, When you install Ccleaner, uncheck the Yahoo toolbar option.
Note, in Options, Advanced, uncheck - Only delete files in Windows folders
older than 48 hours.
Note: uncheck Windows Defender in the applications.
Do a scan with all the check marks on.
Open Ccleaner and press "Windows" "Aplications" and Run Cleaner from the
menu choose 'Issues' and then press scan for issues, Repair any fºund.
Run twice Ccleaner, the same as above,until you get “0 bytes to be removed”.

http://home.tiscali.de/zdata/hdcleaner_e.htm
Read Review at MajorGeeks

Have you scanned in safe mode your system using a recently updated
anti-virus program?

For the benefit of the community reading this post, please rate the pºst.

I hope this post is helpful.

Let us know how it works ºut.

Еиçеl
--



"qq" wrote:

> Hello, All,
>
> In my computer, the master boot record may be infected with a virus. I have
> installed Symantec AntiViurs in my computer. I run a full scan, but no virus
> was been found in my computer.
>
> Does anyone know how to detect and clear a boot sector virus?
>
> Thanks in advance,
>
> --Qing
>

 
Reply With Quote
 
=?Utf-8?B?U3R1?=
Guest
Posts: n/a
 
      8th Nov 2006
I thought those viruses had disappeared with MS DOS, 386SX CPUs and 2 MB hard
drives ....

Stu

"qq" wrote:

> Hello, All,
>
> In my computer, the master boot record may be infected with a virus. I have
> installed Symantec AntiViurs in my computer. I run a full scan, but no virus
> was been found in my computer.
>
> Does anyone know how to detect and clear a boot sector virus?
>
> Thanks in advance,
>
> --Qing
>

 
Reply With Quote
 
=?Utf-8?B?cXE=?=
Guest
Posts: n/a
 
      9th Nov 2006
Hello, Bill,

Thank you for your information. What you means that run root-kit detectiong
software on my systime?

Why I suspected that I may have a boot sector virus in my Dell computer,
because I often get a blue screen when I boot up my computer, the error
message that is the following:

++++++++++++++++++++++++++++++++++++++++++++++++++++

A problem has been detected and windows has been shut down to prevent damage
to your computer,
KERNEL_STACK_INPAGE_ERROR

If this is the first time you’ve seen this stop error screen, restart your
computer. If this screen appears again, follow these step:

Check to make sure any new hardware or software is properly installed. If
this is a new installation, ask your hardware or software manufacturer for
any windows update you might need.

If problem continue, disable or remove any newly installed hardware or
software. Disable BIOS memory options such as caching or shadowing. If you
need to use Safe Mode to remove or disable components, restart your computer,
press F8 to select Advanced Startup options and then select Safe Mode.

Technical information:
STOP: 0x00000077 (0x00000001, 0x823D4488, 0x00000000, 0xF1F25960)

Beginning dump of physical memory, physical memory dump complete.

+++++++++++++++++++++++++++++++++++++++++++++++++++

I searched from web for fixing the problem. I got an article for
troubleshooting “Stop 0x00000077” at http://support.microsoft.com/kb/315266.
In the article, they said that this issue can occur if the master boot record
is infected with virus. So, before I do anything, I want to detect if I have
a boot sector virus in my computer.

Currently, I installed Symantec AntiVirus Version 10.1 in my computer. I
have done a full scan. No any virus has been found in my computer. But I
didn’t know if they did a scan for boot sector virus when I did the full scan.

Is there any suggestion for me?

Thanks in advance,

--Qing


"Bill Sanderson MVP" wrote:

> What makes you think this is the case? Have you run root-kit detection
> software on your system?
>
> F-secure's trial Blacklight is easy to use. You may need to disable some
> antispyware or antivirus products while scanning with it, however.
>
> http://www.f-secure.com/blacklight/
>
>
>
> --
>
> "qq" <(E-Mail Removed)> wrote in message
> news:EF0172DC-EDB7-4B83-82B7-(E-Mail Removed)...
> > Hello, All,
> >
> > In my computer, the master boot record may be infected with a virus. I
> > have
> > installed Symantec AntiViurs in my computer. I run a full scan, but no
> > virus
> > was been found in my computer.
> >
> > Does anyone know how to detect and clear a boot sector virus?
> >
> > Thanks in advance,
> >
> > --Qing
> >

>
>
>

 
Reply With Quote
 
=?Utf-8?B?cXE=?=
Guest
Posts: n/a
 
      9th Nov 2006
Hi, Stu,

Thanks for your information.

--Qing

"Stu" wrote:

> I thought those viruses had disappeared with MS DOS, 386SX CPUs and 2 MB hard
> drives ....
>
> Stu
>
> "qq" wrote:
>
> > Hello, All,
> >
> > In my computer, the master boot record may be infected with a virus. I have
> > installed Symantec AntiViurs in my computer. I run a full scan, but no virus
> > was been found in my computer.
> >
> > Does anyone know how to detect and clear a boot sector virus?
> >
> > Thanks in advance,
> >
> > --Qing
> >

 
Reply With Quote
 
=?Utf-8?B?cXE=?=
Guest
Posts: n/a
 
      9th Nov 2006
Hi, Engel,

Thank you for your information.

Regarding why I suspect a boot sector infector, I just explain why in my
last message.

Currently, I am runing Symantec AntiVirus Version 10.1 on my computer. I
have run a full scan, no virus has been found in my computer. but I don't
know if it scan for a boot sector virus.

--Qing

"Engel" wrote:

> Hello Qing,
>
> On what basis do you "suspect" a Boot Sector Infector ?
>
> This is a very small class of viruses that are not found on Today's systems
> using NTFS partitions and mere conjecture is not enough.
>
> Boot sector viruses haven't been common for many years and it is extremely
> unlikely that you have one.
>
> Can you tell me what antivirus product you are running?
>
> Clean out your temporarily "junk yard"
> and then to use a program such as CCleaner and or HDCleaner for a more
> thorough cleaning, running in safe mºde. for total cleaning.
>
> Ccleaner - http://www.ccleaner.com
> http://www.ccleaner.com/downloadbuilds.asp
>
> Note, When you install Ccleaner, uncheck the Yahoo toolbar option.
> Note, in Options, Advanced, uncheck - Only delete files in Windows folders
> older than 48 hours.
> Note: uncheck Windows Defender in the applications.
> Do a scan with all the check marks on.
> Open Ccleaner and press "Windows" "Aplications" and Run Cleaner from the
> menu choose 'Issues' and then press scan for issues, Repair any fºund.
> Run twice Ccleaner, the same as above,until you get “0 bytes to be removed”.
>
> http://home.tiscali.de/zdata/hdcleaner_e.htm
> Read Review at MajorGeeks
>
> Have you scanned in safe mode your system using a recently updated
> anti-virus program?
>
> For the benefit of the community reading this post, please rate the pºst.
>
> I hope this post is helpful.
>
> Let us know how it works ºut.
>
> Еиçеl
> --
>
>
>
> "qq" wrote:
>
> > Hello, All,
> >
> > In my computer, the master boot record may be infected with a virus. I have
> > installed Symantec AntiViurs in my computer. I run a full scan, but no virus
> > was been found in my computer.
> >
> > Does anyone know how to detect and clear a boot sector virus?
> >
> > Thanks in advance,
> >
> > --Qing
> >

 
Reply With Quote
 
Melvin \(math\) Klassen
Guest
Posts: n/a
 
      9th Nov 2006
> I often get a blue screen when I boot up my computer, the error message
that is the following:
>
> A problem has been detected and windows has been shut down to prevent

damage to your computer,
> KERNEL_STACK_INPAGE_ERROR


1. Run a spyware scanner ('microsoft.private.security.spyware.general')
2. Run 'MEMTEST86+' or some other heavy-duty RAM-testing software
3. Run hard-drive testing software (download from the web-site of the vendor
of your computer's hard-drive).


 
Reply With Quote
 
Dave M
Guest
Posts: n/a
 
      9th Nov 2006
All very good responses from Melvin. It's most likely you will get
additional Blue Screen errors and might be able to narrow it down more, but
I'd really suspect a page file block read error in the paging area of your
HD indicating a permanent failure on your hard drive more likely than a
malware infection. So I'd add to Melvin's list take an image backup of your
hard drive using something like Acronis True Image or Ghost if you don't
already do so regularly already. It's hard to loose all the work you've
already put in downloading and customizing. I once saw a suggestion to set
the page size to zero or just to turn paging off for a while to see if it
eliminates the blue screens, you could try that:

Control Panel > System > Properties > Advanced > Performance Settings >
Performance Options > Advanced > Virtual Memory > Change

to see if the page errors go away, but the system will run s-l-o-w-l-y
while testing. I never could get a disk diagnostic test from my
manufacturer to show any specific error in conjunction with this crash.
Also see this KB...

http://support.microsoft.com/kb/130801
--

Regards, Dave


Melvin (math) Klassen wrote:
>> I often get a blue screen when I boot up my computer, the error message
>> that is the following:
>>
>> A problem has been detected and windows has been shut down to prevent
>> damage to your computer, KERNEL_STACK_INPAGE_ERROR

>
> 1. Run a spyware scanner ('microsoft.private.security.spyware.general')
> 2. Run 'MEMTEST86+' or some other heavy-duty RAM-testing software
> 3. Run hard-drive testing software (download from the web-site of the
> vendor of your computer's hard-drive).



 
Reply With Quote
 
=?Utf-8?B?cXE=?=
Guest
Posts: n/a
 
      9th Nov 2006
Hi,

Thank you for your help.

My computer is Dell Optiplex GX280. I have done a Diagnostics which Dell
installed in the computer. All of the test passed. I didn't get any error
message. Do I need do more testing for RAM & Hard disk? What software I can
use for it?

Thanks in advance,

--Qing


"Melvin (math) Klassen" wrote:

> > I often get a blue screen when I boot up my computer, the error message

> that is the following:
> >
> > A problem has been detected and windows has been shut down to prevent

> damage to your computer,
> > KERNEL_STACK_INPAGE_ERROR

>
> 1. Run a spyware scanner ('microsoft.private.security.spyware.general')
> 2. Run 'MEMTEST86+' or some other heavy-duty RAM-testing software
> 3. Run hard-drive testing software (download from the web-site of the vendor
> of your computer's hard-drive).
>
>
>

 
Reply With Quote
 
 
 
Reply

Thread Tools
Rate This Thread
Rate This Thread:

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
question on boot sector viruses Rage Skywolfe Windows XP General 28 25th Apr 2009 12:39 AM
Why WinXP makes change in boot sector at each boot? Crux Crux Windows XP General 1 8th Jan 2007 04:03 PM
Dual Boot Problem - Misplaced boot sector =?Utf-8?B?Um9ib0R1ZGU=?= Windows Vista General Discussion 0 15th Jun 2006 11:34 PM
Boot Sector Virus - Can I check it on DOS level - Can't boot in Win Daniel Windows XP Hardware 1 28th Oct 2003 04:52 AM
During XP Dual Boot Installation Setup Wants to Write to Boot Sector of C: Shep Windows XP Help 1 22nd Oct 2003 03:45 AM


Features
 

Advertising
 

Newsgroups
 


All times are GMT +1. The time now is 11:18 AM.