Re: Stealth_Boot Virus

From: David H. Lipman (DLipman~nospam~_at_Verizon.Net)
Date: 10/23/03


Date: Thu, 23 Oct 2003 12:21:33 -0400

Roger:

You are leaving things out. I must assume you are using McAfee. Can I also assume that
the Win2K disk is formatted in NTFS ?

Have you tried loading HIMEM.SYS in CONFIG.SYS of the boot disk or executing XMSmmgr.exe
before BOOTSCAN ?

You can also try searching drive "C:" for SCAN.EXE, the McAfee commandline scanner. Boot
off the DOS disk (and only if it is NOT NTFS) move to the directory where you found
SCAN.EXE and execute...(remember that you are dealing with the 8.3 rules of directory and
file naming)

scan c:\ /boot /html "c:\ScanReport.html"

A HTML report called "ScanReport.html" will be placed in the root of drive "C:"

Dave

"roger" <rroper.removethis@rogersandbelding.com> wrote in message
news:078b01c3997d$db24ce50$a001280a@phx.gbl...
| Recomendations for removing the Stealth_Boot virus is to
| create a virus free boot disk and scan disk. After
| booting at he A:\prompt you are to execute the following
| command:
| BOOTSCAN C:/boot/clean
|
| I need to know how to create such a boot disk for W2000.
| Whe I try booting from a DOS 6.22 disk and running the
| command I get the message "Unable to initialise XMS" and
| the virus seems to remain. I am hoping someone out there
| has already had to clean this virus and can help me out.
|
| Thanks -R



Relevant Pages

  • Re: Is this a virus? Can I reinstall XP from a flash disk (my CD drives broken)
    ... First the keyboard wouldn't react to h, 4, or 6 being ... CD-rom so I can't use my recovery disk. ... tells me can have become messed up by a possible virus (should I be ... and had left the flash disk's Windows recovery ...
    (uk.comp.sys.laptops)
  • Re: Cant Reload Office 2000
    ... You should have clarified that bit of information in your first post. ... it sounded like it was asking for the Office XP Professional SP-2 ... the (insert latest virus name here) virus, all mail sent to my personal ... ||| a message asking for my XP Professional, Service Pack 2 disk. ...
    (microsoft.public.office.setup)
  • Re: LSASS.EXE System Error - The end point format is invalid
    ... > I ran a virus scan which reported no problems and all the Windows ... A disk check has been scheduled. ... Cleaning up 309 unused index entries from index $SII of file 0x9. ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: hard drive problem
    ... 4a which anti virus, anti spyware were installed BEFORE ever going ... message from messenger service saying get some program? ... install old disk, the new disk as slave appears fine ... what probably happened is your windows install was ...
    (microsoft.public.windowsxp.help_and_support)
  • SUMMARY: Veritas disk recovery
    ... manager that requested to remain nameless. ... I simply pulled the disk in question and replaced it with another. ... are not the intended recipient you are strictly prohibited from using, ... We use reasonable endeavours to virus scan all ...
    (SunManagers)