GAHHH!! now my other system has a virus prob

Absolut Talent · Post by **Absolut Talent** » Wed Jan 15, 2003 7:08 pm

ok.....i reboot my other system (the one im on now)
and at the boot screen, windows says it found a virus called stealthboot

anyone know how I can get rid of this?
i am currently downloading a trial of norton 2003 anti virus......will this fix everything?

Slugbait · Post by **Slugbait** » Wed Jan 15, 2003 7:14 pm

From AVP:

It's a harmless memory resident stealth virus. It hits hard drive MBR upon loading from infected floppy and then hooks INT 13h and infects the floppy boot sectors. It doesn't manifest itself.

So, you've also got infected floppies, too. Vicious cycle of cleaning and re-infection will possibly occur...

Absolut Talent · Post by **Absolut Talent** » Wed Jan 15, 2003 7:23 pm

so there is no way of getting rid of it?

without reformatting?

blade · Post by **blade** » Wed Jan 15, 2003 9:13 pm

http://securityresponse.symantec.com/av ... _boot.html

Scroll down for removal instructions.

I suggest http://www.grisoft.com as a free virus scanner. It has stopped some viri that norton could not. And it's free.

Since you already have that virus it might prevent you from installing the av. But still if norton is working then do try their removal instructions.

Absolut Talent · Post by **Absolut Talent** » Thu Jan 16, 2003 6:27 pm

well......still no worky

The virus is still in there no matter what I do

And the really sad thing.....is that this virus infects ALL floppys i put into my system. So there is no way to make a emergency boot disk which I need

So i guess I have no other choice but to reformat this sytem

But one quick question, if anyone knows......

Can this stealthboot virus get transfered to another computer via a lan? I know it stays in the boot sector of the HD, but a lan is the only way I can think of to save some files I need on this system. I have no access to the cdrw on this system and it doesnt recognise a slave HD

Post by **FlyingPenguin** » Thu Jan 16, 2003 8:36 pm

I never used to leave the Boot Sector protection enabled in BIOS - foudn it a nuisance. But with all the bootsector viruses lately I've turned it on.

blade · Post by **blade** » Thu Jan 16, 2003 9:13 pm

Damn, sorry Absolute.

Some of these new ones are proving to be very tough and nasty. Like the one HT recently got.

Can this stealthboot virus get transfered to another computer via a lan?

Read more on that page about the virus, it should say whether it can be transferred like that or not. If nothing shows up then I suggest type in that virus name in the search box and see if anything more shows up. But I'd think it could.

Absolut Talent · Post by **Absolut Talent** » Sat Jan 18, 2003 12:22 am

well...i reformatted

still no good
looks like the virus stayed in the memory and was waiting for me to return

I am all out of ideas.

I need to make a mcafee boot disk, but i cant make a disk cuase all disks get infected by the virus

I have tried both free online scanners and some other scanners on my system. Nothing can correct this damned stealthboot virus. If i went out and bought a mcafee virus scan , or norton 2003 anti virus, do they come with a emergency boot disk?

blade · Post by **blade** » Sat Jan 18, 2003 12:47 am

Holy shit!

Not sure if they come with a boot disk or not but I'd first try and see if you can get one from someone. Maybe ask in the forums if anyone has one they could send. But would that work with this virus, hmmm.

Can you try a low level format? You'd need the hard drive utility from your hard drive maker, but it goes on a floppy too. hmm, I never tried it but it might work if burned to a cdr. First I'd try the utility and have a friend make it for you, then do a low level format. It writes zeros to the drive and removes any partitions. Makes it like a new hd again.

Not sure if that will work but it's worth a shot.

That's one tough virus!

Absolut Talent · Post by **Absolut Talent** » Sat Jan 18, 2003 12:58 am

heh, then I gotta find out what kind of HD is in this machine.
its a HP.

but I am gonna try one more thing before I try a low level format
When I reformatted, i didnt boot from a boot disk. I just exited to dos and did fdisk and format c from there.

so i think the virus was still in memory.
So i am gonna start up from a win98 boot disk I found (gonna make sure its write protected) and then I will format and fdisk from there

maybe it will make a difference

matt719 · Post by **matt719** » Sat Jan 18, 2003 1:12 am

Would reseting the CMOS delete the memory? I dunno about you, but reseting to CMOS always solves every problem for me

Good luck.

Absolut Talent · Post by **Absolut Talent** » Sat Jan 18, 2003 3:01 am

i reformatted again with the win98 floppy........virus still here

dammit this is pissing me off

dont know about resetting the cmos on this board. dont know a whole lot about it. I know its an asus.

But before I search about which board it is, does anyone know if that would work at all? Thanks for hte suggestion matt

VooDoo · Post by **VooDoo** » Sat Jan 18, 2003 9:06 am

can you pull out the memory sticks and boot

with very little memory or try other memory sticks

me

blade · Post by **blade** » Sat Jan 18, 2003 11:15 am

Resetting the cmos is usually a piece of cake and just requires you to move a tiny jumper. Usually on the motherboard there are 3 pins, the jumper is in 2. Unplug the power supply, remove the jumper and place it on the one pin it wasn't on and the other pin closest to it. Then place it back where it originally was.

This resets the bios so after booting up you'll need to go in your bios to set things as they were before. Look in your manual for the cmos or the asus website to be sure where it's at and how to reset it. Never had an asus so the cmos may be somewhere different or a keyboard command.

I'm not sure this will help, but it is worth a shot.

Absolut Talent · Post by **Absolut Talent** » Sat Jan 18, 2003 8:40 pm

well no need to reset the bios

As it turns out, my parents were talking to my neighbor. He knows a little bit about systems.
They told him what is up with our system. He comes over this morning while I was still sleeping and trys to work on it.

He couldnt get anything to work on this machine. So he asks me what I have done already. I named off everything he suggested

I told him if I could get ahole of a mcafee emergency disk, I could get rid of it. He didnt think he had one.
But as it turns out, He found his old emergency disk, lent it to me. I booted up now with it. typed in bootscan c: /boot /clean /nomem hit enter, bada-bing no more stealthboot

I am extatic

So now I am gonna reformat, so i can start from a clean system. And this whole ordeal will be over with

Thanks for all the help/input guys.

PCA Forums

GAHHH!! now my other system has a virus prob

GAHHH!! now my other system has a virus prob

muhahahahahaha, I WIN!