boot sector virus?

daveman2 · May 15, 2005

I have ongoing thread in "hardware" section in this very site. Please refer to specifics of problem there: "bios boots only to default values (even after reflash)"

In short, I have a compromised floppy drive which says "No id address mark was found on the floppy disk"

My bios has been recently reflashed, and does not help ongoing problem of bios only booting if default values are present. Computer always boots to windows if bios shows up under non-default settings, but this could take hours or may not happen at all (boot to bios under non-default)

i ran scan on ad-aware and it came bake with this: vendor - Windows, Category - vulnerability, object HKEY_CLASSES_ROOT:scrfile\shell\open\command"" ("%1" %*), Comment - possible virus infection, SCR FILE EXTENSION COMPROMISED

I have used ad-aware to remove this, but it keeps coming back.

It is entirely possible my booting and bios problems are the result of overclocking my processor and maybe damaging my board, but this discovery and what I have read about boot sector viruses makes me wonder.

Please help if you can.

chaslang · May 16, 2005

Try going here and running the SCR File Association Fix to see if it helps with this issue.

I doubt this has anything to do with your floppy problem and I do not think that is a malware related issue. However, just to be safe, you can run our standard cleanup procedures (below) and we can make sure you are clean:

- Run ALL the steps in this Sticky thread READ ME FIRST BEFORE ASKING FOR SUPPORT: Basic Spyware, Trojan And Virus Removal

Make sure you check version numbers and get all updates.

- Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.

After doing ALL of the above you still have a problem:

- Download HijackThis 1.99.1

- Unzip the hijackthis.exe file to a folder you create named C:\Program Files\HJT

- Do NOT run Hijack This from the Desktop, a temp folder, or a sub-folder of C:\Documents and Settings, or choose to run it directly from the downloaded ZIP file.

- Before running HijackThis: You must close each of the following:your web browser, e-mail client, instant messenger, and programs like notepad, wordpad, MS Word etc. And any other unnecessary running programs.

- Run HijackThis and save your log file.

- Post your log as an ATTACHMENT to your next message. (Do NOT copy/paste the log into your post).

Log in or Sign up

boot sector virus?

daveman2 Private E-2

chaslang MajorGeeks Admin - Master Malware Expert Staff Member

Log in or Sign up

boot sector virus?

daveman2 Private E-2

chaslang MajorGeeks Admin - Master Malware Expert Staff Member

Useful Searches