PCA Forums

ok.....i reboot my other system (the one im on now)
and at the boot screen, windows says it found a virus called stealthboot

anyone know how I can get rid of this?
i am currently downloading a trial of norton 2003 anti virus......will this fix everything?

From AVP:

It's a harmless memory resident stealth virus. It hits hard drive MBR upon loading from infected floppy and then hooks INT 13h and infects the floppy boot sectors. It doesn't manifest itself.

So, you've also got infected floppies, too. Vicious cycle of cleaning and re-infection will possibly occur...

so there is no way of getting rid of it?

without reformatting?

http://securityresponse.symantec.com/av ... _boot.html

Scroll down for removal instructions.


I suggest http://www.grisoft.com as a free virus scanner. It has stopped some viri that norton could not. And it's free. Since you already have that virus it might prevent you from installing the av. But still if norton is working then do try their removal instructions.

well......still no worky

The virus is still in there no matter what I do

And the really sad thing.....is that this virus infects ALL floppys i put into my system. So there is no way to make a emergency boot disk which I need

So i guess I have no other choice but to reformat this sytem



But one quick question, if anyone knows......

Can this stealthboot virus get transfered to another computer via a lan? I know it stays in the boot sector of the HD, but a lan is the only way I can think of to save some files I need on this system. I have no access to the cdrw on this system and it doesnt recognise a slave HD

I never used to leave the Boot Sector protection enabled in BIOS - foudn it a nuisance. But with all the bootsector viruses lately I've turned it on.

Damn, sorry Absolute. Some of these new ones are proving to be very tough and nasty. Like the one HT recently got.

Can this stealthboot virus get transfered to another computer via a lan?

Read more on that page about the virus, it should say whether it can be transferred like that or not. If nothing shows up then I suggest type in that virus name in the search box and see if anything more shows up. But I'd think it could.

well...i reformatted


still no good
looks like the virus stayed in the memory and was waiting for me to return

I am all out of ideas.

I need to make a mcafee boot disk, but i cant make a disk cuase all disks get infected by the virus


I have tried both free online scanners and some other scanners on my system. Nothing can correct this damned stealthboot virus. If i went out and bought a mcafee virus scan , or norton 2003 anti virus, do they come with a emergency boot disk?

Holy shit!

Not sure if they come with a boot disk or not but I'd first try and see if you can get one from someone. Maybe ask in the forums if anyone has one they could send. But would that work with this virus, hmmm.

Can you try a low level format? You'd need the hard drive utility from your hard drive maker, but it goes on a floppy too. hmm, I never tried it but it might work if burned to a cdr. First I'd try the utility and have a friend make it for you, then do a low level format. It writes zeros to the drive and removes any partitions. Makes it like a new hd again.

Not sure if that will work but it's worth a shot.

That's one tough virus!

heh, then I gotta find out what kind of HD is in this machine.
its a HP.


but I am gonna try one more thing before I try a low level format
When I reformatted, i didnt boot from a boot disk. I just exited to dos and did fdisk and format c from there.

so i think the virus was still in memory.
So i am gonna start up from a win98 boot disk I found (gonna make sure its write protected) and then I will format and fdisk from there


maybe it will make a difference

Would reseting the CMOS delete the memory? I dunno about you, but reseting to CMOS always solves every problem for me Good luck.

i reformatted again with the win98 floppy........virus still here



dammit this is pissing me off


dont know about resetting the cmos on this board. dont know a whole lot about it. I know its an asus.

But before I search about which board it is, does anyone know if that would work at all? Thanks for hte suggestion matt

can you pull out the memory sticks and boot

with very little memory or try other memory sticks

me

Resetting the cmos is usually a piece of cake and just requires you to move a tiny jumper. Usually on the motherboard there are 3 pins, the jumper is in 2. Unplug the power supply, remove the jumper and place it on the one pin it wasn't on and the other pin closest to it. Then place it back where it originally was.

This resets the bios so after booting up you'll need to go in your bios to set things as they were before. Look in your manual for the cmos or the asus website to be sure where it's at and how to reset it. Never had an asus so the cmos may be somewhere different or a keyboard command.

I'm not sure this will help, but it is worth a shot.

well no need to reset the bios

As it turns out, my parents were talking to my neighbor. He knows a little bit about systems.
They told him what is up with our system. He comes over this morning while I was still sleeping and trys to work on it.

He couldnt get anything to work on this machine. So he asks me what I have done already. I named off everything he suggested

I told him if I could get ahole of a mcafee emergency disk, I could get rid of it. He didnt think he had one.
But as it turns out, He found his old emergency disk, lent it to me. I booted up now with it. typed in bootscan c: /boot /clean /nomem hit enter, bada-bing no more stealthboot

I am extatic


So now I am gonna reformat, so i can start from a clean system. And this whole ordeal will be over with


Thanks for all the help/input guys.