 gt7697cPremium join:2001-02-16 The Hive | Got a boot virus!!! I have discovered that I have a boot virus on a floppy disk. The virus in question is called: said by NAV:
Bloodhound Boot
The floppy came with a shrink wrap product called Check IT Utilities.
The interesting thing is that AVG latest version did not catch this at all.
But that is not important now. NAV is offering to fix this, should I let it continue or what should I do???? -- Just my 2 bits. |
|
 | If you feel you have the latest signature updates, go for it. If however this shrink wrap program on a floppie is not that important, deep six it ! -- For all those who take the sword....will perish by the sword |
|
|
|
 gt7697cPremium join:2001-02-16 The Hive | Can't repair it. NAV can't repair it.
The CD offers to create the floppy. So I took a clean floppy that I have and let the CD recreate the floppy.
Then I ran NAV over the just created floppy. Guess what. Now it is infected with the boot virus.
I wonder if the CD is infected with the virus, or if NAV is just a giving a false alarm???
Any suggestions???? -- Just my 2 bits. |
|
 Anon | Instead of just taking the word of NAV how about looking for information on the internet relating to signature files with this virus. Then look on your floppies and check them yourself. No signature files , probably no virus. Might be best to check it from DOS so to find hidden files. Just a though... -- when in doubt, your not alone. |
|
 gt7697cPremium join:2001-02-16 The Hive | I can't find anything about it at Symantec, except that NAV will detect it if I have the latest defs, which I have.
Can somebody help me find some more in depth info on this virus??? -- Just my 2 bits. |
|
 redxiiPremium,Mod join:2001-02-26 Sherwood, MI Reviews:
·Clear Wireless
·Suddenlink
·Sprint Mobile Br.. Host: Broadband Tweaks Suddenlink ISDN Fiber Optic AOL Broadband
| reply to gt7697c
Re: Got a boot virus!!!»www.symantec.com/avcenter/venc/d···und.html
This is all that I could fine for now.
Detected as: Bloodhound.Boot
Aliases: None
Area of Infection: Floppy Boot Sector, Master Boot Record
Characteristics: Memory Resident
-- "Never mess with the eagles!" BellSouth ADSL speed: 1410/230 of 1500/256. |
|
 | Ummm " Memory Resident " I hate those I have had two and on both of them I had to reformate my computer ... |
|
 gt7697cPremium join:2001-02-16 The Hive | reply to redxii How do I put the diskette into Quarantine to send it to them??? When NAV scans the diskette it does not give me the opportunity to Quarantine the floppy. -- Just my 2 bits. |
|
 gt7697cPremium join:2001-02-16 The Hive | reply to Nsane_iceman Well I am glad to say that it is not on the system itself. Thank the computer gods for NTFS. 
But it is on a floppy disk that I would like to use on reboot, which I will not use until it is either fixed or I find something better than the program that is on that disk. -- Just my 2 bits. |
|
 | reply to gt7697c My strong suggestion is that you Fix NAV not the virus, but since that may not make any sense try this.....Bloodhound Aliases Bloodhound.AOLPWS, Bloodhound.MBR, Bloodhound.boot.string, Bloodhound Word macro virus, Bloodhound.NeuralMBR.
Description Bloodhound is not the name of a virus, but a message displayed by Symantec's Norton Anti-Virus when it thinks it may have found a new virus.
You may like to re-scan your system with Sophos Anti-Virus - if it is a virus that Sophos knows about it will tell you its correct name. If Sophos does not find a virus please send a sample to support@sophos.com so our experts can analyse the file. Our virus analysts will be able to ascertain quickly whether it is truly a new virus or a Norton Anti-Virus false alarm.
»www.sophos.com/virusinfo/analyse···und.html |
|
 redxiiPremium,Mod join:2001-02-26 Sherwood, MI | reply to gt7697c Format the floppy and send the infected CD to the garbage can(not the computer one). -- "Never mess with the eagles!" BellSouth ADSL speed: 1410/230 of 1500/256. |
|
 jaykaykay4 Ever YoungPremium,MVM join:2000-04-13 Scottsdale, AZ kudos:19 Reviews:
·Speakeasy
| reply to gt7697c Seems to be a somewhat old one. Check this out:
»www.google.com/search?q=Bloodhound%20Boot
There's enough info here to keep you busy and perhaps be just a wee bit helpful at the same time. |
|
 gt7697cPremium join:2001-02-16 The Hive | reply to redxii The interesting thing is that I scanned the CD and nothing was found.
Just the floppy that came with it, and the floppy that it created.
The cd may be good. I have installed the programs off it before without having any problems, so I don't think the main software had the infection. If there is a virus on the cd it is probably in the subsystem that makes the floppy. -- Just my 2 bits. |
|
 IGGYNo Guru Just Here To HelpPremium,MVM join:2001-03-30 Chatham, IL
| reply to gt7697c Here's what I came up with = »www.antivirus.com/vinfo/virusenc···oodhound But I noticed the GOOGLE link previously posted as a link to my info. But the link I posted has multiple info on several different viri with this name. -- Test Your Anti Virus & FIREWALL & MORE!! at IGGYZ [text was edited by author 2001-09-27 00:48:21] |
|
 gt7697cPremium join:2001-02-16 The Hive | Would the fact that this floppy contains stand alone Diagnostic Utilities cause NAV to think that this floppy contains the Bloodhound.boot???? -- Just my 2 bits. |
|
 | Everything That I have ever read at Mcafee has the fine print on those back pages telling you to first uninstall Nut and Bolts, checkit and so many other apps. before you install and use their software.Norton has it own Utilites in competition with Checkit, why you can not even get a free security scan from Symantec if you have an outdated version of Norton AV on your PC, you must uninstall it first.
I think you have now come to the correct conclusion. I was trying to tell you that in my other post.
Every company wants your business. To make both of these apps. work together will be a challange for you. |
|
 SteveI know your IP addressConsultant join:2001-03-10 Yorba Linda, CA kudos:5 | reply to gt7697c said by gt7697c: Would the fact that this floppy contains stand alone Diagnostic Utilities cause NAV to think that this floppy contains the Bloodhound.boot????
Boot sector code has to fit in a very small space (less than 512 bytes), and by the time you add the code that simply has to be there to boot the machine, there is very little room for the shenanigans. This suggests that a relatively small signature is used to detect the "bad stuff", and it's not out of the question that "good stuff" could be mistaken for it.
But I have zero actual knowledge of any of these utilities -- just speaking in general.
Steve -- Stephen J. Friedl / Software Consultant / Tustin, California USA / »www.unixwiz.net |
|