How to clean Boot Sector virus - Angelina

How to clean or delete a boot sector virus named Angelina in my hdd?
LVL 1
cybermilkyAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

improveyourpcCommented:
cybermilky,
Here are your removal instructions for the Angelina virus:

http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=ANGELINA.A-B
0
cybermilkyAuthor Commented:
Hi improveyourpc,

I tried the trendmicro but the virus is still there.
I'm using XP, I found the virus with mcafee.
0
improveyourpcCommented:
cybermilky,

Stoned.Angelina is a boot virus that infects the DOS boot sector of floppy disks and the master boot record (MBR) of hard disks.

You must use the fdisk /mbr command to repair an infected MBR.
Insert an uninfected, write-protected, bootable disk that also contains the FDISK program into the floppy disk drive, and then restart the computer.
Type the following, and then press Enter:

fdisk /mbr

Remove the floppy disk, and then restart the computer.
Start AntiVirus, and run a full system scan. (make sure you're Mcafee is updated with the latest version and virus definitions. Norton Utilities also has an online scanner you can use here:

http://security.symantec.com/ssc/home.asp?j=1&langid=ie&venid=sym&plfid=23&pkj=YLEDKERRDTIPOKYJLEL

Once there simply click on "Scan for Viruses"
0
Ultimate Tool Kit for Technology Solution Provider

Broken down into practical pointers and step-by-step instructions, the IT Service Excellence Tool Kit delivers expert advice for technology solution providers. Get your free copy now.

cybermilkyAuthor Commented:
Hi improveyourpc,

I tried the fdisk /mbr. Then scan my pc again, the virus is still there.
0
improveyourpcCommented:
Ok...Which program did you use to rescan with? Have you tried the following:

Recovering the Master Boot Record (MBR) and Boot Sector of Windows NT4.0/2K/XP

Boot your computer with a Windows 2000/XP CD.
At the "Welcome to Setup" screen, press R to repair, and then press C to start the Windows Recovery Console
Select the appropriate number for the Windows installation that you want to repair. Usually, this 1.
Next, type the administrator password. If the administrator password does not exist, just press ENTER.
On the command prompt, type in the following command then press Enter:
FIXMBR
On the command prompt, type in the following command then press Enter:
FIXBOOT <Drive name>
where <Drive name> is the drive letter where the boot sector will be written. Usually, FIXBOOT alone without the parameter is enough.
Then type EXIT to restart your computer.
0
improveyourpcCommented:
Also, if McAfee detected the virus, what did it do with the infected file(s)? Do you have it set up to quarantine them, delete them or repair the infected file(s)?
0
cybermilkyAuthor Commented:
Hi improveyourpc,

Yes, I used my XP CD to boot and followed the steps of TrendMicro. After restarted my pc, the virus still found by McAfee.

I tried fdisk /mbr, the virus still there.

McAfee detected Angelina virus, but it cannot be deleted/clean. So I can only click Sop or Exclude.
0
improveyourpcCommented:
OK..Try running McAffee in safe mode. Also, try the Trend Micro Free Online Scan found here:

http://housecall.trendmicro.com/

Free Online Scan

Scan Your PC:
Ease your mind and scan your PC for viruses.
 Scan Now. It's Free! - Select your location, let the files load.
Select your hardrive (System C:) and select auto clean
Press Scan

Just thinking that this scan may be able to remove what McAfee cannot.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
cybermilkyAuthor Commented:
Hi improveyourpc,

The virus is gone. Thanks.

I tried to install TrendMicro and it didn't detect the virus, I guess the virus is gone. Then, I tried Norton Anti virus as well, it didn't detect any virus anymore. Then, I tried the Trend Micro steps with fixmbr & fixboot. Then, I reinstall McAfee to rescan my pc, it didn't detect the virus anymore. The virus is deleted! yeah~
0
improveyourpcCommented:
Your welcome! Glad to hear it!
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Desktops

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.