Infectionname: Bootsectorvirus Sinowal (A-C)
Type: Bootsectorvirus
Other names: Avira: BOO/Sinowal.A, BOO/Sinowal.B, BOO/Sinowal.C (This virus is only known by Avira!)
Risk: High (Dangerous)
Reported by: Linus

What is a Bootsectorvirus?

A boot sector virus is a computer virus which infects the boot sector on hard disks, floppy disks, and theoretically also other bootable media such as CD's and DVD's boot sector virus does not need to be able to successfully boot the victims computer to infect it. Because of this, even non-bootable media can spread a boot sector virus.

Once the infected computer successfully boots, the boot sector virus stays in memory and infects floppies and other media when they are written to by the infected computer.

Boot sector viruses have become increasingly less common as floppy disks have become rarer.

How to delete Bootsectorvirus Sinowal?

Normal Steps to delete a virus (see Fight of the Viruses - Steps to Success)

1. Update System

It is always good to update your operating system. Outdated versions offer a very high risk of infections. It is not only important to have a updated operating system, the next step is also important:

2. Latest Virusscanner

3. Combat the virus

Now we are going to eliminate the virus

 We recommend:

Load your operating system in the Safe Mode (to load the Safe Mode in  Windows press when loading Windows F8 or click Start => Run => write "msconfig" and click "OK" then press => BOOT.INI "=> crochet at startup options" / SAFEBOOT "), and turn off the System Restore, then make full system scans. Scan all files on your system, and delete all threats found with your Antivirus - and Anti - Spyware program. Then turn on the System Restore and load your operating in normal mode.

(For the safety of the virus has been deleted) Download HijackThis down and do a scan with logfile, do also (if possible) a log file of your full system scans and post us to help, by forum or by e-mail to " j_soliman@gmx.at ". CAUTION: Don´t tick and fix anything without a permit of a  specialist. There is a risk to damage your system

Search the virus/es in the folder/s where the finds were made. It should no longer be found there. If the folders are unimportant remove them. (The folder you are looking for can be hidden. To see hidden folders at Microsoft Windows click on "Tools" => Folder Options' => 'View' => "Show hidden files and folders" to tick off and on "Apply" => "OK" button)

What to do when these steps don´t work?

If you can´t remove this bootsectorvirus, try first the Avira Bootsector - Repairtool and if this also don´t work you have to reinstall the bootsector. If you want to do so, open "Start" => "Run... (Ausführen ...)" => and type this in "fdisk /mbr" => then click OK => your bootsector will be deleted. Then shutdown your Computer for a while and then start it again. We recommend you then to reinstall your operating system, but if you don´t want so you can skip this step. Then, when you have reinstalled your bootsector, do full system scans, and look if this virus was deleted or not.