Junkie virus - disk boot sector A?

Discussion in 'malware problems & news' started by chris9, Jan 2, 2003.

Thread Status:
Not open for further replies.
  1. chris9

    chris9 Registered Member

    Joined:
    Jan 2, 2003
    Posts:
    5
    I've received an alert ' disk boot Sector A: Junkie virus Nod 32 cannot clean this virus.

    I've no idea what to do - could someone please help. I've an ordinary (not boot disk) in drive at moment .. where do I go from here.

    Thanks in advance.
     
    chris9, Jan 2, 2003
    #1
  2. Technodrome

    Technodrome Security Expert

    Joined:
    Feb 13, 2002
    Posts:
    2,140
    Location:
    New York
    You got to do this from DOS! Download DOS version of NOD and scan you computer again!
    Configure NOD DOS to disinfect infected boot sector or files!


    Technodrome
     
    Technodrome, Jan 2, 2003
    #2
  3. chris9

    chris9 Registered Member

    Joined:
    Jan 2, 2003
    Posts:
    5
    o_O

    ok, technodrome, have downloaded dos version of Nod .. it opened and then I closed it and now can't find the darn thing when I do try to find it.

    Do I use the normal Nod32 to scan again - it just brought up the virus message.

    How do I configure the Dos version? (and how do I find it if it can't be found using the exe file name? Which part of the computer should I look for it in?

    a little confused here ..
     
    chris9, Jan 3, 2003
    #3
  4. chris9

    chris9 Registered Member

    Joined:
    Jan 2, 2003
    Posts:
    5
    A friend has told me it is just on the floppy .. I removed it and ran the normal Nod32 and no viruses. Would this be right?
     
    chris9, Jan 3, 2003
    #4
  5. LowWaterMark

    LowWaterMark Administrator

    Joined:
    Aug 10, 2002
    Posts:
    18,282
    Location:
    New England
    Ah, okay. Well, that does sound correct as long as in your first post you meant that the virus reported by NOD was on the floppy drive ( A: ). And, now that you've removed the floppy that was in that drive, you no longer get a virus warning from NOD...

    Where did you get that floppy? Was it supposed to be a file or program someone was giving you? If so, they were probably infected and are passing it on via any floppies they are writing... You may want to tell them. But, if you created that floppy and now it has a virus, you must suspect your system.

    With the floppy drive empty, and NOD updated to the latest virus definitions, I would do a full system scan, (include all file extensions and use deepest scan settings). This should verify that no infections remain, which would be the case if the only virus was on the floppy diskette and it never transferred to your system.
     
    LowWaterMark, Jan 3, 2003
    #5
  6. puppet

    puppet Guest

    me again , chris9 , now I can't stay logged in when replying o_O?

    Ran the deep scan and no virus detected but get this message

    Can't open WIN 386 swp

    agh!
     
    puppet, Jan 3, 2003
    #6
  7. CrazyM

    CrazyM Firewall Expert

    Joined:
    Feb 9, 2002
    Posts:
    2,428
    Location:
    BC, Canada
    Hi chris9

    Make sure you have cookies enabled for the site and you can select always stay logged in when signing on.

    Did the Nod32 log provide a reason? Usually this happens when it encounters a locked file and is normal.

    Regards,
    CrazyM
     
    CrazyM, Jan 3, 2003
    #7
  8. chris9

    chris9 Registered Member

    Joined:
    Jan 2, 2003
    Posts:
    5
    hi CrazyM

    ah ha. I'm back to the original computer I registered on and am staying logged in. The other computer does have cookies enabled .. can I not use the registration on it?

    re message on Nod32 scan

    the message in full

    C:\WINDOWS\WIN386.SWP error opening [4}]

    Notes: [4] Could not read the file. The file is used by another application or the operating system with exclusive rights.

    Does this mean everything is ok?
     
    chris9, Jan 3, 2003
    #8
  9. Paul Wilders

    Paul Wilders Administrator

    Joined:
    Jul 1, 2001
    Posts:
    12,475
    Location:
    The Netherlands
    Hi Chris,

    It does ;). NOD32 when configured to scan all files will scan the swap file as well - and that on is in use all the time. A common message pop up. This will change in version 2.0 btw - the displayed message that is.

    regards.

    paul
     
    Paul Wilders, Jan 3, 2003
    #9
  10. chris9

    chris9 Registered Member

    Joined:
    Jan 2, 2003
    Posts:
    5
    Thanks everyone for the help. Nice place you've got here. :)
     
    chris9, Jan 3, 2003
    #10
  11. Paul Wilders

    Paul Wilders Administrator

    Joined:
    Jul 1, 2001
    Posts:
    12,475
    Location:
    The Netherlands
    Thanks for the compliment on behalf of our team ;).

    regards.

    paul
     
    Paul Wilders, Jan 3, 2003
    #11
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...