Re: Boot Malmo on my USB Mem!! Help

From: Zvi Netiv (support_at_replace_with_domain.com)
Date: 10/22/05


Date: Sat, 22 Oct 2005 10:23:30 +0200


"Malko" <twamarc@gmail.com> wrote:

> Thx, but please it's detected by Symantec Norton AV!
>
> Every time I connect the USB flash disk, the message is there, "Boot
> malmo". I think it could not be a false alert. Think about it.

It contradicts physics rules. The Malmo (Junkie) MBR will only install to a
device specified 80h in the BIOS (first fixed hard drive), when running an
infected file under plain DOS.

Norton AV is known to suffer of this particular false alarm. See
http://tinyurl.com/chg9b for more threads on the same.

If you insist keeping NAV and using the memory stick, then disable the boot
check in NAV's options. It may stop the false alert and you don't really risk
anything.

Regards, Zvi

--
NetZ Computing Ltd. ISRAEL www.invircible.com www.ivi.co.il (Hebrew)
InVircible Virus Defense Solutions, ResQ and Data Recovery Utilities


Relevant Pages

  • Re: Boot Malmo on my USB Mem!! Help
    ... Thx, but please it's detected by Symantec Norton AV! ... Every time I connect the USB flash disk, the message is there, "Boot ... malmo". ...
    (microsoft.public.security.virus)
  • Re: Boot. Malmo threat
    ... That virus was common in the early nineties, ... with "boot Malmo" code in its MBR, that runs under W9x or later, will fail ... normally then you don't have Boot ... supposed to be is the MBR. ...
    (microsoft.public.security.virus)