To register for an Internet.com membership to receive newsletters and white papers, use the Register button ABOVE.
To participate in the message forums BELOW, click here

WinDrivers Computer Tech Support Forums  

Go Back   WinDrivers Computer Tech Support Forums > For Techs Only > Spyware & Antivirus - Security

Spyware & Antivirus - Security Discuss all system security, spyware, adware and malware issues here.

Reply
 
Thread Tools Search this Thread Display Modes
Old April 5th, 2001, 11:09 AM   #1
LagerLagerLager
Registered User
 
Join Date: Apr 2001
Location: Hovering over the Atlantic Ocean
Posts: 38
Post Virus?

I`ve been pulling my hair out for days trying to figure this one out.

A couple of days ago we got in a PC that wouldn`t boot. Reported the IDE drive as an invald system disk. Checked/replaced system files - same problem. Ran both Norton and Mcafee boot scans - nothing. Fdisk /mbr. Still there. No important data so low-level format and reload. Solved the problem.

But now we have three other PCs with similar symptoms. (someone had been using bootable floppies with the write protect off....) But two of them have McAfee installed and when it tries to run ScanPM I get a DOS screen with what looks like hexadecimal addresses all over it and the machine hangs.

I`ve downloaded the latest updates to Norton and McAfee but they still find nothing. I could just format again, but I want to find out what is causing this in case it spreads.

All ideas will be gratefully received.
__________________
It is in truth not for glory, nor riches, nor honours that we are fighting, but for freedom -- for that alone, which no honest man gives up but with life itself.
LagerLagerLager is offline   Reply With Quote
Old April 5th, 2001, 01:36 PM   #2
jbar1
Registered User
 
Join Date: Aug 2000
Location: Isleton, Calif, USA
Posts: 463
Post

You are right on the money about the floppies. I think you are dealing with an old virus that is starting to show up again(at least in our area) It is only transfered via floppies. I think it originated about 1995. For a full description search for NYB which is the original name, sometimes called Stone. It is very stealthy and is a mbr virus and relocates the original MBR. what make this tough is any time you boot the virus instantly goes to the top of the system mem just below the 640k boundry. Anyway check out NYB or Stone. Hope this helps
__________________
If life is a bitch, then what is death? I believe that I will take the bitch...
jbar1 is offline   Reply With Quote
Old April 5th, 2001, 03:21 PM   #3
tha 4NiK8R
Registered User
 
tha 4NiK8R's Avatar
 
Join Date: Mar 2001
Location: Idaho
Posts: 465
Post

I came into this same type of problem. I finally fixed it with a AVG boot disk(www.grisoft.com).
__________________
"Only two things are infinite, the universe and human stupidity, and I'm not sure about the former."
- Albert Einstein
tha 4NiK8R is offline   Reply With Quote
Old April 5th, 2001, 10:55 PM   #4
LagerLagerLager
Registered User
 
Join Date: Apr 2001
Location: Hovering over the Atlantic Ocean
Posts: 38
Post

Cheers for the help guys, I`ll check up on the Stone virus and let you know what happens.
__________________
It is in truth not for glory, nor riches, nor honours that we are fighting, but for freedom -- for that alone, which no honest man gives up but with life itself.
LagerLagerLager is offline   Reply With Quote
Reply

Bookmarks

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump


All times are GMT -5. The time now is 10:40 PM.



Acceptable Use Policy

internet.comMediabistrojusttechjobs.comGraphics.com

WebMediaBrands Corporate Info


Advertise | Newsletters | Feedback | Submit News

Legal Notices | Licensing | Permissions | Privacy Policy

Powered by vBulletin® Version 3.7.3
Copyright ©2000 - 2009, Jelsoft Enterprises Ltd.