cybermilky
asked on
How to clean Boot Sector virus - Angelina
How to clean or delete a boot sector virus named Angelina in my hdd?
ASKER
Hi improveyourpc,
I tried the trendmicro but the virus is still there.
I'm using XP, I found the virus with mcafee.
I tried the trendmicro but the virus is still there.
I'm using XP, I found the virus with mcafee.
cybermilky,
Stoned.Angelina is a boot virus that infects the DOS boot sector of floppy disks and the master boot record (MBR) of hard disks.
You must use the fdisk /mbr command to repair an infected MBR.
Insert an uninfected, write-protected, bootable disk that also contains the FDISK program into the floppy disk drive, and then restart the computer.
Type the following, and then press Enter:
fdisk /mbr
Remove the floppy disk, and then restart the computer.
Start AntiVirus, and run a full system scan. (make sure you're Mcafee is updated with the latest version and virus definitions. Norton Utilities also has an online scanner you can use here:
http://security.symantec.com/ssc/home.asp?j=1&langid=ie&venid=sym&plfid=23&pkj=YLEDKERRDTIPOKYJLEL
Once there simply click on "Scan for Viruses"
Stoned.Angelina is a boot virus that infects the DOS boot sector of floppy disks and the master boot record (MBR) of hard disks.
You must use the fdisk /mbr command to repair an infected MBR.
Insert an uninfected, write-protected, bootable disk that also contains the FDISK program into the floppy disk drive, and then restart the computer.
Type the following, and then press Enter:
fdisk /mbr
Remove the floppy disk, and then restart the computer.
Start AntiVirus, and run a full system scan. (make sure you're Mcafee is updated with the latest version and virus definitions. Norton Utilities also has an online scanner you can use here:
http://security.symantec.com/ssc/home.asp?j=1&langid=ie&venid=sym&plfid=23&pkj=YLEDKERRDTIPOKYJLEL
Once there simply click on "Scan for Viruses"
ASKER
Hi improveyourpc,
I tried the fdisk /mbr. Then scan my pc again, the virus is still there.
I tried the fdisk /mbr. Then scan my pc again, the virus is still there.
Ok...Which program did you use to rescan with? Have you tried the following:
Recovering the Master Boot Record (MBR) and Boot Sector of Windows NT4.0/2K/XP
Boot your computer with a Windows 2000/XP CD.
At the "Welcome to Setup" screen, press R to repair, and then press C to start the Windows Recovery Console
Select the appropriate number for the Windows installation that you want to repair. Usually, this 1.
Next, type the administrator password. If the administrator password does not exist, just press ENTER.
On the command prompt, type in the following command then press Enter:
FIXMBR
On the command prompt, type in the following command then press Enter:
FIXBOOT <Drive name>
where <Drive name> is the drive letter where the boot sector will be written. Usually, FIXBOOT alone without the parameter is enough.
Then type EXIT to restart your computer.
Recovering the Master Boot Record (MBR) and Boot Sector of Windows NT4.0/2K/XP
Boot your computer with a Windows 2000/XP CD.
At the "Welcome to Setup" screen, press R to repair, and then press C to start the Windows Recovery Console
Select the appropriate number for the Windows installation that you want to repair. Usually, this 1.
Next, type the administrator password. If the administrator password does not exist, just press ENTER.
On the command prompt, type in the following command then press Enter:
FIXMBR
On the command prompt, type in the following command then press Enter:
FIXBOOT <Drive name>
where <Drive name> is the drive letter where the boot sector will be written. Usually, FIXBOOT alone without the parameter is enough.
Then type EXIT to restart your computer.
Also, if McAfee detected the virus, what did it do with the infected file(s)? Do you have it set up to quarantine them, delete them or repair the infected file(s)?
ASKER
Hi improveyourpc,
Yes, I used my XP CD to boot and followed the steps of TrendMicro. After restarted my pc, the virus still found by McAfee.
I tried fdisk /mbr, the virus still there.
McAfee detected Angelina virus, but it cannot be deleted/clean. So I can only click Sop or Exclude.
Yes, I used my XP CD to boot and followed the steps of TrendMicro. After restarted my pc, the virus still found by McAfee.
I tried fdisk /mbr, the virus still there.
McAfee detected Angelina virus, but it cannot be deleted/clean. So I can only click Sop or Exclude.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Hi improveyourpc,
The virus is gone. Thanks.
I tried to install TrendMicro and it didn't detect the virus, I guess the virus is gone. Then, I tried Norton Anti virus as well, it didn't detect any virus anymore. Then, I tried the Trend Micro steps with fixmbr & fixboot. Then, I reinstall McAfee to rescan my pc, it didn't detect the virus anymore. The virus is deleted! yeah~
The virus is gone. Thanks.
I tried to install TrendMicro and it didn't detect the virus, I guess the virus is gone. Then, I tried Norton Anti virus as well, it didn't detect any virus anymore. Then, I tried the Trend Micro steps with fixmbr & fixboot. Then, I reinstall McAfee to rescan my pc, it didn't detect the virus anymore. The virus is deleted! yeah~
Your welcome! Glad to hear it!
Here are your removal instructions for the Angelina virus:
http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=ANGELINA.A-B