I have seen many people that use have Hiren's BootCD and saw a Youtube video in which an MBR infection was removed using Kaspersky TDSS Killer to check for one and booting up with Hiren's to remove. It did look like all they did was repair the MBR though. I tried to download it and they want my credit card information and other person information that I will not disclose to a web site that I don't trust. Eset won't allow me to download at other web sites. How does anyone safely download this? Can Hiren's BootCD be trusted?
The main reason I'm here is because of the last computer I worked on. It was infected with the ICE FBI worm. It was completely locked up except the command prompt. Someone brought another computer that had the same thing and I repaired the MBR with Partition Commander from Avanquest which I believe used to be Partition Magic, and the operation system was toast. That's usually the case with me when a computer is locked up and won't boot to the operating system. I delete the partition, recreate it, format it, and then install the operating system. I also pull the hard drive out, and connect it to my work computer using a Hard Drive to USB adapter to back up the data.
I can repair computers that will boot to the operating system by repairing the MBR and then using sfc /scannow to make sure the system files are okay. I then install a trial version of Eset Smart Security plus Malwarebytes and scan it with them.
I went back to hxxp://www.hirensbootcd.org/download/ and looked more closely and didn't click on the green download bar. I went to the bottom of the page and clicked on Hirens.BootCD.15.2.zip and had no problem downloading it as far as a warning about the mirror site I was downloading from. I did however, get two warning from ESS that the file itself had potentially malicious files in it. I clicked on continue because I know that just having a file sitting on my hard drive won't infect my computer. I noticed that hxxp://www.hirensbootcd.org/download/ has information about why anti-virus programs will warn you about possible malicious programs contained in the Zip file.
You need to go into your UEFI settings and disable Secure Boot. You also need to look there to see if there is also a setting that disables booting from portable media -- as that will also prevent booting from USB or CD.
a71949beef