Stealthboot virus on MBR of disk 0
Posted on 2009-04-04
I mistakenly rebooted my Windows XP Pro SP3 system with a floppy diskette in the drive that was infected by a stealth boot virus according to McAfee. I got a message to install a bootable diskette, but by that time the damage was done. The system boots fine but I keep getting error messages from McAfee Enterprise 8.51 Antivirus telling me certain files are infected with Stealthboot virus under Name "MBR of Disk 0". If I check any of those files McAfee tells me they are infected. But when I took the hard drive out of the system and hooked it up as an external drive using a USB cable setup on another system and rechecked those files with McAfee on that system, it reports they are clean. Nevertheless, I replaced the suspect files from an known clean system with the same files in the same versions.
My question is how can I remove the stealthboot virus from the master boot record of the hard drive without loosing all the data on the drive or having to reinstall from scratch?
Can I reinstall the drive back in the system and boot from an Windows 98 bootable floppy then run Fdisk / MBR to rebuild the master boot record and preserve that drive data?
Thanks for your help.