The perfect solution for quickly deleting sector viruses

  

Many system users don't know about sector viruses, so we're doing a tutorial on the completion of the sector virus today, and how do we solve this virus by copying the code boot sector virus to infect the computer system or boot sector on the floppy disk Or partition table on the hard disk, now we will continue to explain.

During startup, the virus is loaded into memory. Once in memory, the virus will infect any non-infected disks accessed by the system. Examples of boot sector viruses are Michelangelo and Stoned.

A boot sector virus is distributed to a computer system by booting, or attempting to boot from an infected floppy disk. Even if the disk does not contain the need to successfully start the MS-DOS system file, trying to boot from the infected disk will load the memory virus. Internally as a device driver virus hook itself. Virus Move Interrupt 12 returns, allowing itself to remain in memory even if it is hot start. The virus will then infect the first system on the hard disk.

Because the virus movement is interrupted 12, the MS-DOS system memory will be less than the normal 2K (2048 bytes). This can be verified by running the MS-DOS CHKDSK command.

For example, if the system has 640K, CHKDSK will report:

Total number of bytes 655360 Memory

CHKDSK will report whether the system is infected with the boot sector virus:

Total number of bytes 653312 Memory

Some systems use 1K (1024 bytes) of memory for the BIOS. Other systems are used for 2K (2048 bytes) of memory image RAM. In order to use CHKDSK as an accurate measure, whether a system is infected with a virus must be considered. Please check with the hardware manufacturer to see that the system uses a portion of the 640K MS-DOS memory.

Once the system is infected with a boot sector virus, any non-write protected disk accessed by that system will be infected. For example, just making a DIR command on a floppy disk will cause the disk to be infected with a virus. NOTE: MS-DOS version 5.0 disks are not included with the teeth; therefore, they are write protected. The possibility is that these disks contain viruses that are close to none. MS-DOS 5.0 disk files are compressed, so the actual file size is different. You can determine the compressed file by using the underscore (_) which is the file name extension of the last character. On Disk 5 (5.25-inch disk set) or Disk 3 (3.5-inch disk set) to expand the compressed file, use the EXPAND utility.

PS:FDISK/MBR, then SYS C:

The above is a detailed description of the sector virus, through the introduction of the sector virus, how to completely remove the virus Method sharing, I believe that in the future, I will deal with it in a similar situation. According to the above methods, your problem will be solved immediately.

Copyright © Windows knowledge All Rights Reserved