Boot Virus

tls68 · May 8th, 2001, 08:36 AM

I think my computer was infected with a boot virus, it continually plays the song happy birthday, and starts as soon as you power on the pc. Has anyone heard of this? I can still use the computer, but it is extremely slow. I have McAfee Anti-Virus software, but nothing seems to pick it up.
I thought I got rid of it before, but now it's back again!! What can I do to get rid of this? It is very very annoying. Thanks for any help you can give.

FooL · May 8th, 2001, 09:25 AM

Make sure it's not a joke loaded into your start-up menu. Also, depending on what Operating System you're using will dicate the best way to get rid of this. Let us know a little more about your machine.

Haven't heard of a BSV that plays happy B-Day. Usually, those virii are pretty small...

If all else fails and you end up dumping your machine, when you fdisk do a fdisk /mbr to wipe your Master Boot Record.

Happy Troubleshooting!

jay015 · May 8th, 2001, 09:26 AM

Might find this link interesting! http://www.f-secure.com/v-descs/birthday.shtml

tls68 · May 8th, 2001, 03:06 PM

I'm running Win98. I was thinking about the one for November 13 however, it didn't start then and it doesn't stop playing for anything. If I have to, is it better/easier to replace the bios of to fdisk?

Thanks again!

FooL · May 8th, 2001, 05:03 PM

You don't "replace" a BIOS. It's a chip on your motherboard that is (going back to my A+ days...) EEPROM. Electrical(?) Erasable Programmable Read Only Memory

Basically, that's fancy talk for this chip doesn't change. *Except* if there has been a BIOS update for your Mother Board. This is kind of like getting new drivers for your video card or something like that.

As for your question, is it easier to replace the BIOS or fdisk.... Well, it IS easier to flash a BIOS. But, the only problem is, that if it isn't this Nov 13 thing, then it's probably NOT the BIOS. (Nice like by the way Jay015

)

You MAY be best by re-loading your system from scratch. I hate to give that advice over the Net because I haven't seen your system and it MAY be something simple.

At the very least, BEFORE you dump your system go to the run prompt in Start menu. Type this in without the quotes--> "msconfig" and then press enter. A box will come up. Hit the tab that's all the way to the right. This is a (limited) list of things that start up with your computer. Don't be afraid to uncheck anything. You can always go back and check it again if it produces the wrong effect. But, go through that and reboot to see if it was something in there causing the B-Day song to play. If it's not there or in the Startup folder on your start menu, I'm at a loss over the net.

I wish there was more I could do for you, but I'm at the end of the rope for online troubleshooting.

Good Luck!

FooL · May 8th, 2001, 05:09 PM

Oops, forgot something. While in the msconfig window, look at these too.

config.sys, win.ini, and autoexec.bat (these are the files that your computer reads on boot to know how to "act")

These will all be other tabs you can click on. It may look kind of confusing, but just read through the files. They'll be written in semi-recognizable English. As you read through the files, see if you can find something that relates to running a .wav during boot or any other time that looks suspicious.

Sorry I didn't post that before. Just remembered about that feature.

tls68 · May 9th, 2001, 01:56 PM

Thanks FooL, I am also at a loss. I did check out the msconfig..didn't see anything (not that that means alot). i didn't uncheck anything for start up (last tab) because I wasn't sure if what I unchecked would disappear and wouldn't be able to recheck it, but I'll look at it again. I'm just wondering if I reload everything, if that will correct the problem.

Simple question: If I fdisk and reformat the c, what do I have to load so that my 98 CD will load right away?

I have to do something, it is really slowing down and locking up my computer...and the music doesn't stop!!!

Thanks again

Pyroate · May 10th, 2001, 02:12 PM

Quote:

Originally posted by tls68:

Simple question: If I fdisk and reformat the c, what do I have to load so that my 98 CD will load right away?

Thanks again

just a clean 98bootdisk

tls68 · May 11th, 2001, 09:09 AM

Thanks for you help. Last night it just stopped playing that happy birthday song. It did this before but then came back again. Maybe I should leave it alone for now.
I couldn't find anything in the settings. I'm not sure what happened. I'm keeping my fingers crossed it doesn't come back.

Does this sound like anything else out there?

May 8th, 2001, 08:36 AM	#1
tls68 Registered User Join Date: May 2001 Location: PA Posts: 46	Boot Virus I think my computer was infected with a boot virus, it continually plays the song happy birthday, and starts as soon as you power on the pc. Has anyone heard of this? I can still use the computer, but it is extremely slow. I have McAfee Anti-Virus software, but nothing seems to pick it up. I thought I got rid of it before, but now it's back again!! What can I do to get rid of this? It is very very annoying. Thanks for any help you can give.

May 8th, 2001, 09:25 AM	#2
FooL Registered User Join Date: Nov 2000 Location: Uter Posts: 280	Make sure it's not a joke loaded into your start-up menu. Also, depending on what Operating System you're using will dicate the best way to get rid of this. Let us know a little more about your machine. Haven't heard of a BSV that plays happy B-Day. Usually, those virii are pretty small... If all else fails and you end up dumping your machine, when you fdisk do a fdisk /mbr to wipe your Master Boot Record. Happy Troubleshooting! __________________ if(post.eof()){SigBox.setText("Have A Day.");}

May 8th, 2001, 05:03 PM	#5
FooL Registered User Join Date: Nov 2000 Location: Uter Posts: 280	You don't "replace" a BIOS. It's a chip on your motherboard that is (going back to my A+ days...) EEPROM. Electrical(?) Erasable Programmable Read Only Memory Basically, that's fancy talk for this chip doesn't change. Except if there has been a BIOS update for your Mother Board. This is kind of like getting new drivers for your video card or something like that. As for your question, is it easier to replace the BIOS or fdisk.... Well, it IS easier to flash a BIOS. But, the only problem is, that if it isn't this Nov 13 thing, then it's probably NOT the BIOS. (Nice like by the way Jay015 ) You MAY be best by re-loading your system from scratch. I hate to give that advice over the Net because I haven't seen your system and it MAY be something simple. At the very least, BEFORE you dump your system go to the run prompt in Start menu. Type this in without the quotes--> "msconfig" and then press enter. A box will come up. Hit the tab that's all the way to the right. This is a (limited) list of things that start up with your computer. Don't be afraid to uncheck anything. You can always go back and check it again if it produces the wrong effect. But, go through that and reboot to see if it was something in there causing the B-Day song to play. If it's not there or in the Startup folder on your start menu, I'm at a loss over the net. I wish there was more I could do for you, but I'm at the end of the rope for online troubleshooting. Good Luck! __________________ if(post.eof()){SigBox.setText("Have A Day.");}

May 8th, 2001, 05:09 PM	#6
FooL Registered User Join Date: Nov 2000 Location: Uter Posts: 280	Oops, forgot something. While in the msconfig window, look at these too. config.sys, win.ini, and autoexec.bat (these are the files that your computer reads on boot to know how to "act") These will all be other tabs you can click on. It may look kind of confusing, but just read through the files. They'll be written in semi-recognizable English. As you read through the files, see if you can find something that relates to running a .wav during boot or any other time that looks suspicious. Sorry I didn't post that before. Just remembered about that feature. __________________ if(post.eof()){SigBox.setText("Have A Day.");}

Thread Tools	Search this Thread
Show Printable Version Email this Page	Search this Thread: Advanced Search
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

May 8th, 2001, 09:26 AM	#3
jay015 Registered User Join Date: Nov 2000 Location: Montreal Posts: 534	Might find this link interesting! http://www.f-secure.com/v-descs/birthday.shtml

May 8th, 2001, 03:06 PM	#4
tls68 Registered User Join Date: May 2001 Location: PA Posts: 46	I'm running Win98. I was thinking about the one for November 13 however, it didn't start then and it doesn't stop playing for anything. If I have to, is it better/easier to replace the bios of to fdisk? Thanks again!

May 9th, 2001, 01:56 PM	#7
tls68 Registered User Join Date: May 2001 Location: PA Posts: 46	Thanks FooL, I am also at a loss. I did check out the msconfig..didn't see anything (not that that means alot). i didn't uncheck anything for start up (last tab) because I wasn't sure if what I unchecked would disappear and wouldn't be able to recheck it, but I'll look at it again. I'm just wondering if I reload everything, if that will correct the problem. Simple question: If I fdisk and reformat the c, what do I have to load so that my 98 CD will load right away? I have to do something, it is really slowing down and locking up my computer...and the music doesn't stop!!! Thanks again

May 11th, 2001, 09:09 AM	#9
tls68 Registered User Join Date: May 2001 Location: PA Posts: 46	Thanks for you help. Last night it just stopped playing that happy birthday song. It did this before but then came back again. Maybe I should leave it alone for now. I couldn't find anything in the settings. I'm not sure what happened. I'm keeping my fingers crossed it doesn't come back. Does this sound like anything else out there?