Results 1 to 7 of 7
  1. #1
    Super Moderator
    Join Date
    Aug 2001
    Location
    Evergreen, CO, USA
    Posts
    6,623
    Thanks
    3
    Thanked 60 Times in 60 Posts

    Bitten by a virus? or NAV?

    I got the "your boot sector has been changed" from Norton AntiVirus 2001 when it tried to run it's regular weekly complete sweep. Since I hadn't made any system changes, installed new software or any of the other possibilities, I presumed I was dealing with a virus attack. So I promptly downloaded the latest virus definitions, started the sweep again, and got the same message. After more reflection, I decided to let it restore a backup of my boot sector. It then asked to make a backup on a floppy (which I luckily did), and after writing the files, NAV locked up. I finally tried to kill it, and that failed as well - still had mouse activity, but nothing else. Finally decided a hard restart was the only answer, and rebooted. Then ran the virus sweep with no problems, and I thought everything was great . . . . until I tried to access the F: drive! Not there! Nor was the E: drive! <img src=/S/hiding.gif border=0 alt=hiding width=70 height=24> I hope. So my question is:

    Does anyone have any experience with using the undoboot.exe program, and if so will it also restore the partition table as well? I also have a copy of Partition Magic which I could start experimenting with, as I'm pretty sure the data is still there - it's just the partitions (1 8GB, 1 60GB with lots of client files and correspondence as well as some recorded music) are gone from the partition table, or so I hope. <img src=/S/blush.gif border=0 alt=blush width=15 height=15>
    Wendell

  2. #2
    Super Moderator
    Join Date
    Dec 2000
    Location
    Renton, Washington, USA
    Posts
    12,560
    Thanks
    0
    Thanked 4 Times in 4 Posts

    Re: Bitten by a virus? or NAV?

    What other disk tools do you have running?
    If you did any "RegistryClean up" this may be doing it. The likes of Windoctor will also make changes to your system.
    There are many ways that a change may be made. If I remember at one time even RelaPlayer could cause this.
    Check the time stamps on you autoexec.bat and config.sys if you have one, remember some games require these.

    Now running HP Pavilion a6528p, with Win7 64 Bit OS.

  3. #3
    Super Moderator
    Join Date
    Aug 2001
    Location
    Evergreen, CO, USA
    Posts
    6,623
    Thanks
    3
    Thanked 60 Times in 60 Posts

    Re: Bitten by a virus? or NAV?

    No - I generally stay away from the "Clean Up" tools, and prefer to do that stuff myself. No other disk tools either - it's a relatively new system with an 80GB drive and a 60GB drive that had Partition Magic installed right after Windows, and before NAV. And I haven't installed any new software for several months, (RealPlayer isn't even installed). The last change I made was a couple of weeks ago when I installed one of the IE security patches that MS notifies you about, and NAV ran a scan after that without warning me. Most curious. I haven't screwed up the courage to try running Partition Magic yet, but I'm sort of leaning that way instead of using the Norton Undo BootSector program.
    Wendell

  4. #4
    Super Moderator
    Join Date
    Aug 2001
    Location
    Evergreen, CO, USA
    Posts
    6,623
    Thanks
    3
    Thanked 60 Times in 60 Posts

    Re: Bitten by a virus? or NAV?

    Unfortunately the saga continues. Running the undoboot.exe told me that there was no difference in the boot records so it didn't restore anything. But I still have a hosed partition table. Partition Magic recognizes an error, but doesn't offer to fix anything. Moral of the story - be really cautious if NAV says it thinks your boot sector has been tampered with.
    Wendell

  5. #5
    5 Star Lounger
    Join Date
    Jan 2001
    Location
    Cumberland, Maryland, USA
    Posts
    880
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Bitten by a virus? or NAV?

    Another problem with NAV (although in general I much prefer it to McAfee) is the consequences of a system restore in Win ME. Doing so--and it's happened twice, yesterday being the latest time--causes the "unable to initialize the virus scanning engine database files." In my experience, that leads to being able to boot only in the Safe Mode, until you apply the fix. Dell covers it at http://support.dell.com/us/en/kb/document_...sp?DN=FA1049615 . What follows is having to uninstall NAV, remove some folders, reinstall it, and then go through the process of updating everything. Gives me pause to ever want to use system restore again.

  6. #6
    Super Moderator
    Join Date
    Aug 2001
    Location
    Evergreen, CO, USA
    Posts
    6,623
    Thanks
    3
    Thanked 60 Times in 60 Posts

    Re: Bitten by a virus? or NAV?

    Thanks for the input. Having moved a couple of months ago, I spent the entire weekend looking for the NAV rescue disks. I found them about 30 minutes ago, ran restore, and voila! I now have a good partition table again and my E: and F: drives are happily back. Thanks for your response.
    Wendell

  7. #7
    5 Star Lounger
    Join Date
    Jan 2001
    Location
    Cumberland, Maryland, USA
    Posts
    880
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Bitten by a virus? or NAV?

    Not sure what I suggested, but I'm glad you got yourself out of that mess. It sounded like the onset of reformatting your HD, which is, knock on wood or some other triteness, something I haven't had to do yet. (Now that I've said that, I'll probably have to do it shortly.)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •