PCBUILD Archives

Personal Computer Hardware discussion List

PCBUILD@LISTSERV.ICORS.ORG

Options: Use Forum View

Use Monospaced Font
Show Text Part by Default
Show All Mail Headers

Message: [<< First] [< Prev] [Next >] [Last >>]
Topic: [<< First] [< Prev] [Next >] [Last >>]
Author: [<< First] [< Prev] [Next >] [Last >>]

Print Reply
Subject:
From:
Reply To:
PCBUILD - PC Hardware discussion List <[log in to unmask]>
Date:
Fri, 17 Apr 1998 07:53:05 +0200
Content-Type:
TEXT/PLAIN
Parts/Attachments:
TEXT/PLAIN (32 lines)
The Monkey virus encrypts the MBR so that you cannot access the hard-disk
when booting from a clean diskette.

Here are instructions that should be of help to you:
Get F-PROT AV software (free for private use!) from:
ftp://ftp.simtel.net/pub/simtelnet/msdos/virus
The file name should be something like: fp-228b.zip
(you may get it from any other simtel mirror as well).

Make a (clean) diskette with the following files from the f-prot package:
english.tx0 , f-prot.exe , sign.def .

Boot your PC from a clean diskette, and then put the diskette with F-prot
files and run:
f-prot /hard

It should work.

Uzi Paz

> Date: Thu, 16 Apr 1998 16:12:14 -0700
> From: "MARTIN J. KNIEP" <[log in to unmask]>
>
> Help!  I have a 386 which I am setting up as my second system to use
> primarily for e-mail.  I have run McAfee Viruscan on the system and it
> tells me I have traces of MONKEY_B Virus in memory.  It instructs to turn
> off and start with a system-bootable disk.  No problem, I insert a system
> disk (containing IO.SYS, MSDOS.SYS, and COMMAND.COM) which I have determined
> to be virus free on another machine.  The system will boot to an "a:>"
> prompt but when I either try to switch to "C:" as the active drive or run
> "dir c:", I get an "invalid drive" message.

ATOM RSS1 RSS2