NYB still around

[Kenneth]

I have a PC that has been infected with NYB. Can I use FDISK /MBR to
repair?

The computer has Windows XP running and the drive is FAT32.

 

[Zvi Netiv]

I have a PC that has been infected with NYB. Can I use FDISK /MBR to
repair?

How do you know you have NYB, just because your AV says that it found NYB in
memory? If the latter then it's a false alarm since NYB leaves no trace in
memory once XP loaded, even if the virus code is in the MBR.

The computer has Windows XP running and the drive is FAT32.

FDISK does not make part of XP, only of DOS based Windows versions (9x and
Millennium). You could use FDISK /MBR after having verified with FDISK /STATUS
that FDISK (from Windows 98 or ME) sees the disk with the correct configuration.

Yet since you run XP, then start Repair Console of the XP setup CD and run
FIXMBR. If your AV still claims seeing NYB after you ran either of the above,
then disable the boot sector verification in your AV settings, or change the AV
altogether.

Regards, Zvi