How to Remove a Boot Sector Virus

Co-authored by Stan Kats

Last Updated: April 14, 2023

Has your computer been acting strange lately? Has it been running slow, or telling you that your computer needs a certain program? If so it may have a virus. This article deals with ones called Boot Sector Viruses. These reside in the sectors that are used to start your Operating System. A simple operating system replacement may leave the virus to continue its evil ways.

Steps

Download Article

{"smallUrl":"https:\/\/www.wikihow.com\/images\/thumb\/a\/a4\/Format-the-C-Drive-With-Windows-7-Step-1Bullet1.jpg\/v4-460px-Format-the-C-Drive-With-Windows-7-Step-1Bullet1.jpg","bigUrl":"\/images\/thumb\/a\/a4\/Format-the-C-Drive-With-Windows-7-Step-1Bullet1.jpg\/aid3260-v4-728px-Format-the-C-Drive-With-Windows-7-Step-1Bullet1.jpg","smallWidth":460,"smallHeight":345,"bigWidth":728,"bigHeight":546,"licensing":"<div class=\"mw-parser-output\"><p>License: <a target=\"_blank\" rel=\"nofollow noreferrer noopener\" class=\"external text\" href=\"https:\/\/creativecommons.org\/licenses\/by-nc-sa\/3.0\/\">Creative Commons<\/a><br>\n<\/p><p><br \/>\n<\/p><\/div>"}

You can not begin to remove the virus if it is in the RAM in your computer.
{"smallUrl":"https:\/\/www.wikihow.com\/images\/thumb\/a\/a5\/Remove-a-Boot-Sector-Virus-Step-2.jpg\/v4-460px-Remove-a-Boot-Sector-Virus-Step-2.jpg","bigUrl":"\/images\/thumb\/a\/a5\/Remove-a-Boot-Sector-Virus-Step-2.jpg\/aid3260-v4-728px-Remove-a-Boot-Sector-Virus-Step-2.jpg","smallWidth":460,"smallHeight":345,"bigWidth":728,"bigHeight":546,"licensing":"<div class=\"mw-parser-output\"><p>License: <a target=\"_blank\" rel=\"nofollow noreferrer noopener\" class=\"external text\" href=\"https:\/\/creativecommons.org\/licenses\/by-nc-sa\/3.0\/\">Creative Commons<\/a><br>\n<\/p><p><br \/>\n<\/p><\/div>"}

Take the drive to a pro. UNPLUG the computer, and all monitors, etc. Remove the HDD (hard disk drive or hard drive) from the infected computer. Be sure to remove all of the static electricity from your self by touching the metal case.

Advertisement
{"smallUrl":"https:\/\/www.wikihow.com\/images\/thumb\/0\/08\/Repair-Boot-Errors-Step-5.jpg\/v4-460px-Repair-Boot-Errors-Step-5.jpg","bigUrl":"\/images\/thumb\/0\/08\/Repair-Boot-Errors-Step-5.jpg\/aid3260-v4-728px-Repair-Boot-Errors-Step-5.jpg","smallWidth":460,"smallHeight":345,"bigWidth":728,"bigHeight":546,"licensing":"<div class=\"mw-parser-output\"><p>License: <a target=\"_blank\" rel=\"nofollow noreferrer noopener\" class=\"external text\" href=\"https:\/\/creativecommons.org\/licenses\/by-nc-sa\/3.0\/\">Creative Commons<\/a><br>\n<\/p><p><br \/>\n<\/p><\/div>"}

Use software on a CD-ROM or floppy (yes, you can still download recovery tools as floppy images) to scan the drive and fix the MBR. Start with the OS install CD. Use the Windows Recovery Console option if you are using Windows XP.
{"smallUrl":"https:\/\/www.wikihow.com\/images\/thumb\/1\/12\/Repair-Boot-Errors-Step-2.jpg\/v4-460px-Repair-Boot-Errors-Step-2.jpg","bigUrl":"\/images\/thumb\/1\/12\/Repair-Boot-Errors-Step-2.jpg\/aid3260-v4-728px-Repair-Boot-Errors-Step-2.jpg","smallWidth":460,"smallHeight":345,"bigWidth":728,"bigHeight":546,"licensing":"<div class=\"mw-parser-output\"><p>License: <a target=\"_blank\" rel=\"nofollow noreferrer noopener\" class=\"external text\" href=\"https:\/\/creativecommons.org\/licenses\/by-nc-sa\/3.0\/\">Creative Commons<\/a><br>\n<\/p><p><br \/>\n<\/p><\/div>"}

Enter BIOS via appropriate startup key for your computer. When the BIOS setup page shows, set the CD or floppy drive to boot first.
{"smallUrl":"https:\/\/www.wikihow.com\/images\/thumb\/6\/65\/Remove-a-Boot-Sector-Virus-Step-5.jpg\/v4-460px-Remove-a-Boot-Sector-Virus-Step-5.jpg","bigUrl":"\/images\/thumb\/6\/65\/Remove-a-Boot-Sector-Virus-Step-5.jpg\/aid3260-v4-728px-Remove-a-Boot-Sector-Virus-Step-5.jpg","smallWidth":460,"smallHeight":345,"bigWidth":728,"bigHeight":546,"licensing":"<div class=\"mw-parser-output\"><p>License: <a target=\"_blank\" rel=\"nofollow noreferrer noopener\" class=\"external text\" href=\"https:\/\/creativecommons.org\/licenses\/by-nc-sa\/3.0\/\">Creative Commons<\/a><br>\n<\/p><p><br \/>\n<\/p><\/div>"}

Find out which company manufactures your HDD and see if they have a utility that will do a low-level format. This part is important because it deletes everything from your hard drive so that no one can get it back, including the virus. Some common HDD manufacturers' tools for doing this can be found here .
{"smallUrl":"https:\/\/www.wikihow.com\/images\/thumb\/0\/0d\/Remove-a-Boot-Sector-Virus-Step-6.jpg\/v4-460px-Remove-a-Boot-Sector-Virus-Step-6.jpg","bigUrl":"\/images\/thumb\/0\/0d\/Remove-a-Boot-Sector-Virus-Step-6.jpg\/aid3260-v4-728px-Remove-a-Boot-Sector-Virus-Step-6.jpg","smallWidth":460,"smallHeight":345,"bigWidth":728,"bigHeight":546,"licensing":"<div class=\"mw-parser-output\"><p>License: <a target=\"_blank\" rel=\"nofollow noreferrer noopener\" class=\"external text\" href=\"https:\/\/creativecommons.org\/licenses\/by-nc-sa\/3.0\/\">Creative Commons<\/a><br>\n<\/p><p><br \/>\n<\/p><\/div>"}
{"smallUrl":"https:\/\/www.wikihow.com\/images\/thumb\/8\/8b\/Install-Windows-7-Step-1.jpg\/v4-460px-Install-Windows-7-Step-1.jpg","bigUrl":"\/images\/thumb\/8\/8b\/Install-Windows-7-Step-1.jpg\/aid3260-v4-728px-Install-Windows-7-Step-1.jpg","smallWidth":460,"smallHeight":345,"bigWidth":728,"bigHeight":546,"licensing":"<div class=\"mw-parser-output\"><p>License: <a target=\"_blank\" rel=\"nofollow noreferrer noopener\" class=\"external text\" href=\"https:\/\/creativecommons.org\/licenses\/by-nc-sa\/3.0\/\">Creative Commons<\/a><br>\n<\/p><p><br \/>\n<\/p><\/div>"}
{"smallUrl":"https:\/\/www.wikihow.com\/images\/thumb\/1\/11\/Remove-a-Boot-Sector-Virus-Step-8.jpg\/v4-460px-Remove-a-Boot-Sector-Virus-Step-8.jpg","bigUrl":"\/images\/thumb\/1\/11\/Remove-a-Boot-Sector-Virus-Step-8.jpg\/aid3260-v4-728px-Remove-a-Boot-Sector-Virus-Step-8.jpg","smallWidth":460,"smallHeight":345,"bigWidth":728,"bigHeight":546,"licensing":"<div class=\"mw-parser-output\"><p>License: <a target=\"_blank\" rel=\"nofollow noreferrer noopener\" class=\"external text\" href=\"https:\/\/creativecommons.org\/licenses\/by-nc-sa\/3.0\/\">Creative Commons<\/a><br>\n<\/p><p><br \/>\n<\/p><\/div>"}

And the most important thing is that you use trusted software to remove the virus or else you will be in more trouble (if that software is infected). Some software will show many virus 'hits' in order to sell the full version, so read reviews first.

Community Q&A

Search

Add New Question

Question

My system doesn't boot completely, then it switches off repeatedly. I can't access my system. What could be the problem?

Community Answer

Your phone is stuck on a bootloop. This happens because of software damage. This is mostly referred to as "bricked phone." The only way to access your system is by reinstalling the device software; this is also known as flashing.

Thanks! We're glad this was helpful.
Thank you for your feedback.
If wikiHow has helped you, please consider a small contribution to support us in helping more readers like you. We’re committed to providing the world with free how-to resources, and even $1 helps us in our mission. Support wikiHow
Yes No

Not Helpful 14 Helpful 11
Question

My computer keeps restarting itself. What do I have to do?

Community Answer

You need to force power off during booting and you will get options for booting. Go to safe mode, go to run (windows key + r), type shell:startup and then enter. Delete files that may cause restart (usually some bat files or virus) and then check in task manager for unidentified startup programs. Finally, restart.

Thanks! We're glad this was helpful.
Thank you for your feedback.
If wikiHow has helped you, please consider a small contribution to support us in helping more readers like you. We’re committed to providing the world with free how-to resources, and even $1 helps us in our mission. Support wikiHow
Yes No

Not Helpful 8 Helpful 5
Question

My computer automatically shut off anytime when I try to update scan or install antivirus and other security activity. What should I do?

Community Answer

It is possible that you might have a rootkit; such a program keeps you from using your security software. Use a rootkit removal program to check if this is the case and if so, remove it.

Thanks! We're glad this was helpful.
Thank you for your feedback.
If wikiHow has helped you, please consider a small contribution to support us in helping more readers like you. We’re committed to providing the world with free how-to resources, and even $1 helps us in our mission. Support wikiHow
Yes No

Not Helpful 3 Helpful 2

See more answers

Ask a Question

200 characters left

Include your email address to get a message when this question is answered.

Submit

Tips

If you feel uncomfortable completing any of the steps, take your computer in to a specialist.

Thanks
Helpful 0 Not Helpful 0
A bootable floppy is NOT required, just a formatted floppy. Check to see if your floppy is formatted for Mac or PC on the label. If required, in MS Windows, go to My Computer, right click on your floppy drive, click "Format...",etc. Then run the downloaded hard-drive floppy image installer. A CD image will require burning software.

Thanks
Helpful 0 Not Helpful 0
There are many reputable malware removal forums on the internet, such as Bleeping Computer. They have certified volunteer experts willing to help.

Thanks
Helpful 0 Not Helpful 0

Show More Tips

Submit a Tip

All tip submissions are carefully reviewed before being published

Submit

Thanks for submitting a tip for review!

Warnings

Be sure to write protect the floppy after writing using the sliding tab, because any virus that is residing in the boot sector of your HDD may copy itself.

Thanks
Helpful 7 Not Helpful 4
A Low-Level format will erase anything and everything on your HDD. It does this because it erases the whole disk, and not just the File Allocation Table (FAT) which is the directory for the hard drive. Its kind of like a telephone directory. When you delete things or do a format in Windows or DOS, known as a High-Level format, it tells the FAT that there is nothing there anymore, but leaves the data on the disk. A Low-Level format or delete tells the FAT that there is nothing there and then rewrites the sectors on the HDD where the file was. Because of this there is no possible way to get your data back after this process is complete. Back up before performing a low level format!

Thanks
Helpful 3 Not Helpful 4

Log in

How to Remove a Boot Sector Virus

Steps

Community Q&A

Tips

Warnings

You Might Also Like

About This Article

Is this article up to date?

Quizzes

You Might Also Like

Featured Articles

Trending Articles

Featured Articles

Featured Articles

Watch Articles

Trending Articles

Explore Categories