Antivirus
Network Security
Help
links
Visitor Focus
You are here:HomeNetwork SecurityVirus Disinfection Instruction→Disinfecting DOS boot record viruses that store the boot sector
Disinfecting DOS boot record viruses that store the boot sector   
Written by yangying   
February 22, 2008 09:15

1. Hard disk

1.1. Disinfecting DOS boot record viruses in Windows 95/98/Me and DOS

  • Backup any important data on the hard drive
  • Switch off the PC, wait several seconds and boot from a clean system disk to prevent the virus from being loaded into memory.
  • Create a set of Sophos Anti-Virus Emergency SAV disks.
  • Put the first floppy disk, containing a copy of 'SWEEP.EXE' in the floppy disk drive and at the A: prompt type:

SWEEP *: -DI

  • When requested insert the floppy disk containing the virus data.
  • Run another scan to check that the virus has been removed.

If infection persists replace the boot sector using the DOS utility SYS.COM. Contact support if in doubt.

  • Switch off the PC, wait several seconds then boot from a clean system disk to prevent the virus from being loaded into memory. This system disk must be formatted with the same version of the operating system as the PC.
  • At the command prompt type

DIR C:

  • Check that the contents of the infected drive are visible. If they are not contact support for advice.
  • To overwrite the DOS boot sector enter

SYS C:

If a virus fragment is reported in upper memory then it probably indicates the presence of a virus. Contact support for advice.

Functionality of the Internet Security 2009

 

 

Hourly updates and fastest response times ensure you benefit from the industry's most up-to-date protection.

New- Advanced anti-virus engine delivers the industry's fastest scan times (Passmark Security, June 2007). Saves time and improves performance.

New - Configuration and privacy tools are designed to help you protect yourself.

Intrusion Protection System and 2-way firewall protect you from hackers; protect your privacy.

Protects you from the phishing and malware sites that you wouldn't otherwise know were attempting to steal from you.

Parental controls filter, block, or report inappropriate content. Limit Internet time to hours and amounts that you set.

Kaspersky Security Network allows your computer to report when it discovers a threat that hasn't been seen before. All 250 million Kaspersky users benefit from our combined knowledge!

 

 

A New Generation of Threat Protection

 

 

Premium Protection fromKaspersky Lab
"At Kaspersky Lab, we protect over 250 million systems worldwide. In 2007 we saw more malicious threats than in the previous 15 years combined. Kaspersky Internet Security 2009 represents a breakthrough in the way we protect our customers with the strongest, most efficient anti-malware technology in the world. And we back this with the finest support team in the business. Trust Kaspersky Lab."

- Eugene Kaspersky

 

1.2. Disinfecting DOS boot record viruses in Windows NT/2000/XP/2003/Vista

Do not switch the PC off. It may not be able to boot again.

If the PC has booted Windows NT/2000/XP/2003/Vista the SAV32CLI command line scanner may be able to disinfect the virus:

  • Backup any important data on the hard drive
  • Close down all programs.
  • Start the Command prompt.
  • Change to the directory where SAV32CLI.EXE is installed. By default, this is C:\Program Files\Sophos SWEEP for NT.
  • To disinfect a DOS boot record virus type the command:

SAV32CLI -MBR   -DI

If your PC cannot boot into Windows NT/2000/XP/2003/Vista or if disinfection has failed then contact support.

A New Generation of Threat Protection
Kaspersky's Internet Security lab has seen an unprecedented growth in cybercrime attacks. In 2007 alone we responded to more than 2 million new malicious threat samples - more than the prior 15 years combined. These attacks have become remarkably sophisticated, with cybercrimals finding new inventive ways to steal private information, personal identities and financial data.

A Smarter Approach to Security
Kaspersky Lab has raised the bar once again. Kaspersky® Internet Security 2009 offers a thoroughly new approach to keeping you safe. Along with new enhancements to our top-rated detection technology, we've added important new layers of security designed to provide the greatest possible protection. And we did it while making version 2009 up to 7 times faster. It's all about premium protection that lets you make the most of your computer's power.

2. Floppy disk

2.1. Disinfecting DOS boot record viruses on floppy disks in Windows 95/98/Me/NT/2000/XP/2003/Vista and OS/2

  • Start the Sophos Anti-Virus GUI.
  • Select the 'Immediate' tab.
  • Go to Options|Configuration... select the 'Action' tab, tick 'Disinfect boot sectors' and 'Request confirmation'. Click 'OK'.
  • Double-click the 'A:' icon to scan the floppy disk drive.
  • Click 'OK' when asked if the disk should be disinfected.
  • Scan the floppy disk again to confirm that disinfection succeeded.

If disinfection failed use Windows Explorer to copy the files to another disk. Reformat the floppy disk.

2.2. Disinfecting DOS boot record viruses on floppy disks in DOS

At the command prompt:

  • Change to the directory where Sophos Anti-Virus is installed.
  • Type the following command and insert the floppy disk when prompted:

SWEEP A: -DI -MU

  • Check the floppy disk again to confirm that disinfection was successful.

If disinfection failed copy the files to another disk using COPY or XCOPY (not DISKCOPY). Reformat the floppy disk.

Tags: Kaspersky Internet Security 2009, Free Kaspersky Internet Security 2009 Download, internet security, antivirus software, antispyware software, personal firewall, antispam

German : Desinfektion von DOS-Boot-Record Store Viren, die den Boot-Sektor
Spanish : DOS desinfección de virus de arranque registro que almacenan el sector de arranque
French : La désinfection de démarrage DOS record virus qui stockent le secteur de démarrage
Japanese : 消毒DOSのブートレコードウイルスは、ストアは、ブートセクタ
Russian : Дезинфекция DOS загрузочную запись вирусов, хранения загрузочного сектора