Forum Home
Press F1
 
Thread ID: 132782 2013-05-22 00:54:00 Australian Federal Police (AFP) Ukash/ICSPA virus NZHawk (4093) Press F1
Post ID Timestamp Content User
1342565 2013-05-25 09:18:00 Some infections disable the ability to boot from CD and USB, makes life interesting when that happens :)

How the heck would it manage that?
Agent_24 (57)
1342566 2013-05-25 09:53:00 How the heck would it manage that?
Its not a new trick, that's been around for years, there was several others that do similar. Maybe disabling the CD drive is not quite the correct way of describing it. Twice now I have had this infection on peoples Computers and as soon as the CD or USB drive try to boot and load in the antimalware removal program, it kills the program before it has time to load, and the Boot fails then carries on as normal, Normal being a standard Boot, which of course wont boot the OS, only the infections.

Once the PC is actually clean, the CD /USB drive boots fine. There are several newer ones around, so not all previous removal methods work.

In the past you simply used to boot into safe mode, but the newer versions have disabled that option as well.
wainuitech (129)
1342567 2013-05-25 12:31:00 Twice now I have had this infection on peoples Computers and as soon as the CD or USB drive try to boot and load in the antimalware removal program, it kills the program before it has time to load, and the Boot fails then carries on as normal, Normal being a standard Boot, which of course wont boot the OS, only the infections.

Wouln't it have to infect the BIOS to do something like that though? Otherwise you'd just enter the BIOS boot menu and manually choose CD or USB etc? Or is there something I'm missing...?
Agent_24 (57)
1 2 3