Boot Sector Viruses waa barnaamijyo xaasidnimo ah oo ku dhex jira darawalkaaga adag. Waxay ku faafiyaan mashiinkaaga iyagoo ku beddelaya Diiwaanka Bootka Masterka (MBR)^{(Master Boot Record (MBR))} ama DOS Boot Sector koodkooda^{(DOS Boot Sector)} . Xaaladaha qaarkood, fayrasyada qaybta boot ayaa sir doona MBR . Habkan hawlgalka ah ayaa ah waxa ka dhigaya fayrasyada qaybta boot inay yihiin kuwo awood leh.

Waa maxay Fayraska Qaybta Boot?

Diiwaanka Boot Master^{(Master Boot Record)} -ku wuxuu ku yaalaa qaybta koowaad ee darawalkaaga adag wuxuuna fuliya mar kasta oo aad koronto kombayutarkaga. Tani waxay ka dhigan tahay in xitaa haddii aad isku daydo inaad ka saarto fayrasyada qaybta boot adoo isticmaalaya antivirus, waxay dib ugu soo celinayaan xusuusta kombiyuutarkaaga bootkaaga xiga.

Asal ahaan ka soo jeeda qaybta boot-kaaga, fayrasyadani waxay markaa ku faafi doonaan dhammaan saxanadaha ku jira kombiyuutarkaaga. Tani waxay ka dhigaysaa fayrasyada qaybta boot inay adag tahay in la saaro.

Sidoo kale, haddii Windows uu shaqeynayo, barnaamijyada ka hortagga caadiga ah ma heli doonaan MBR . Si kastaba ha noqotee, waxaad isticmaali kartaa saxanadaha antivirus bootable si aad meesha uga saarto fayraska qaybta boot. Hagahan ayaa ku tusinaya sida tan loo sameeyo iyo xalalka kale ee aad kombiyuutarkaaga uga takhalusi lahayd fayraska qaybta boot si wanaagsan.

Sida looga hortago Fayraska Qaybta Boot

Halka ka saarida fayrasyada qaybta boot ay aad u dhib badan tahay, way fududahay in laga fogaado in la helo meesha ugu horeysa. Habka ugu badan ee ay u faafiyaan barnaamijyadan xaasidnimada ah waa iyada oo la isticmaalo warbaahinta la wadaago ee laga saari karo.

Kahor intaadan gelin kombuyutarkaaga wax kaydinta kaydinta la rari karo, waa inaad hubisaa inaanu qabin fayraska qaybta boot. Fayrasku waxaa laga yaabaa inuusan ku dhicin mashiinkaaga marka aad ku xirto warbaahinta, laakiin haddii aad ka tagto iyada oo ku xiran inta aad kor u qaadayso nidaamkaaga, markaa dariiqaaga adag ayaa ku dhici doona.

Ka ilaalinta mashiinkaaga fayraska qaybta boot-ka waxay la mid tahay samaynta fayraska guud ahaan - waa inaad haysataa software iyo difaacyo ka hortag ah oo la isku halayn karo oo had iyo jeer la cusboonaysiiyo qeexitaankooda fayraska. Ma soo koobi karo doorarka software-ka antivirus. Xaaladdan, waxaad uga baahan tahay labadan hawlood, ugu horreyn:

• Si aad ula socoto nidaamka kombiyuutarkaaga dhaq-dhaqaaqyada xaasidnimada leh.
• ^(Detect)Ka hel falalka xaasidnimada leh ee la yaqaan iyo qaababka nidaamka kombayutarkaaga .
• Ka baadh fayruusyada oo ka saar saxanka nidaamkaaga.

Qaybta soo socota, waxaan si qoto dheer uga heli doonaa sida ay fayrasyadani u saameeyaan nidaamka kombiyuutarkaaga.

TALO^(TIP) : Waxaad ku ilaalin kartaa Diiwaanka Bootka Master^{(Master Boot Record)} -ka ee kombiyuutarkaaga adigoo isticmaalaya filter MBR^{(MBR Filter)} .

Sidee buu u galo Virus Sector-ka Boot^{(Boot Sector Virus)} ?

Sidaan carrabka ku adkeyney, fayrasyada qaybta boot-ka waxay inta badan ku soo galaan kombuyutarkaaga warbaahinta kaydinta jirka. Si kastaba ha ahaatee, waxaa laga yaabaa inay sidoo kale ku yimaadaan soo dejinta, gaar ahaan goobaha aan la aamini karin iyo lifaaqyada iimaylka.

Markaad ku xidho darawalka qalinka USB ee cudurka qaba ama aad geliso diskooga kumbuyuutarka, fayrasku wuxuu u gudbiyaa nidaamkaaga wuxuuna dhibaa MBR^(MBR) -ga . Waxay wax ka beddeshaa ama gebi ahaanba bedeshaa koodka MBR ee jira , bootintaada xigta, fayrasku waxa lagu shubaa nidaamkaaga oo la socda MBR -ka .

Marka laga hadlayo soo dejinta faylalka cudurka qaba iyo lifaaqyada iimaylka, fayrasyada qaybta boot ayaa inta badan^(mostly) aan waxyeello lahayn markaad soo dejiso. Si kastaba ha noqotee, markaad furto faylka xaasidnimada ah, waxay markaa bilaabeysaa inay qaadsiiso mashiinka martida loo yahay. Xaalado badan, milkiilaha ayaa laga yaabaa inuu u dejiyo tilmaamaha barnaamijka si uu u badiyo oo uu u sameeyo dufcad si uu iimayl ugu diro xiriiradaada.

Mahadsanid, kombuyuutarku qaab dhismeedka BIOS ayaa horumaray, tanina waxay xakamaysay (ilaa xad aad u ballaaran) faafitaanka fayraska qaybta boot. Horumarkan waxaa sabab u ah ku darida ikhtiyaarka loogu oggolaanayo isticmaaleyaasha inay xannibaan koodka wax ka beddelka qaybta koowaad ee darawallada adag ee PC.

Haddii aadan waligaa cusboonaysiin BIOS-kaaga^{(updated your BIOS)} , hadda waa wakhti fiican oo la sameeyo.

Akhri:^{(Read: )} Sida loo kaydiyo loona soo celiyo Diiwaanka Boot Masterka^{(Master Boot Record)} ee MBR Backup ama MDHacker .

Sida loo saaro Virus Sector-ka Boot

Inta badan fayrasyada qaybta boot ayaa sir kara MBR ; Dareewalkaagu aad ayuu u dhaawacmi karaa haddii aadan si sax ah u saarin fayraska.

Dhanka kale, haddii fayrasku aanu qarin MBR oo kaliya uu^(only) waxyeeleeyo qaybta boot, waxaad isticmaali kartaa amarka DOS SYS soo celinta qaybta xun.

Intaa waxaa dheer, waxaad sidoo kale isticmaali kartaa amarka DOS LABEL si aad u soo celiso sumadaha mugga ee saameeyay. Haddii infekshanku uu daran yahay oo aanu hagaajin karin, waxaad ku beddeli kartaa MBR adigoo isticmaalaya amarka FDISK/MBR .

Iyadoo dhammaan hababkan laga yaabo inay u shaqeeyaan xaaladaha qaarkood, isticmaalka software badbaadinta fayraska bootable ee bilaashka ah^{(free bootable antivirus rescue software)} ayaa ah habka ugu ammaansan ee meesha looga saaro fayraska qaybta boot. Tan ugu muhiimsan, software-ka antivirus, uma badna inaad lumiso feylasha iyo xogta lagu keydiyay darawalkaaga adag.

Akhri^(Read) : Sida loo dayactiro Diiwaanka Bootka Master-ka^{(How to repair the Master Boot Record)} .

TRIVIA : Fayraskii ugu horreeyay ee MS-DOS PC^{(first MS-DOS PC virus)} waxa la sameeyay 1986 wuxuuna ahaa fayraska Maskaxda^{(Brain virus)} . Maskaxdu^(Brain) waxay ahayd fayras qaybta boot-ka ah oo uu haleelay kaliya 360k floppy disks. Waxa xiiso leh^{(Interestingly)} , in kasta oo uu ahaa fayraskii ugu horreeyay, haddana wuxuu lahaa awood buuxda oo qarsoodi ah. V-Sign wuxuu ahaa fayraska qaybta kabaha polymorphic ee ugu horreeyay.

What is a Boot Sector Virus and how to prevent or remove them?

Boot Sector Viruses are malicious programs that reside in your hard drive. They infect your machine by replacing your Master Boot Record (MBR) or DOS Boot Sector with their code. In some cases, boot sector viruses will encrypt the MBR. This mode of operation is what makes boot sector viruses are potent.

What is a Boot Sector Virus?

The Master Boot Record is on the first sector of your hard drive and executes whenever you power on your PC. This means that even if you try to remove boot sector viruses using an antivirus, they get loaded back into your computer’s memory on your next boot.

Originating from your boot sector, these viruses will then spread to all the disks on your computer. This makes boot sector viruses tough to remove.

Also, if Windows is running, regular antivirus programs will not have access to the MBR. You can, however, use bootable antivirus disks to remove boot sector viruses. This guide shows you how to do this and other solutions for ridding your computer of boot sector viruses for good.

How to prevent Boot Sector Virus

While removing boot sector viruses is quite challenging, it’s easy to avoid getting them in the first place. The most common way that these malicious programs spread is through shared removable media.

Before inserting any removable storage drive into your computer, you must be sure that it isn’t infected with a boot sector virus. The virus may not get on your machine when you connect the media, but if you leave it connected while you boot up your system, then your hard drive will be infected.

Protecting your machine from boot sector viruses is similar to doing it for viruses in general – you must have reliable antivirus software and defenses and always keep their virus definitions updated. I can’t overemphasize the roles of antivirus software. In this case, you need them for these two functions, primarily:

• To monitor your computer system for malicious activity.
• Detect known malicious actions and patterns in your computer system.
• Scan for viruses and get rid of them from your system’s disks.

In the section that follows, we’ll get more in-depth on how these viruses infect your computer system.

TIP: You can protect your computer’s Master Boot Record with MBR Filter.

How does a Boot Sector Virus get in?

As we’ve emphasized, boot sector viruses enter your PC mainly via physical storage media. However, they may also come bundled in downloads, especially from untrusted sites and email attachments.

When you connect an infected USB pen drive or insert a floppy disk into your computer, the virus gets transferred to your system and infects the MBR. It modifies or completely replaces the existing MBR code, and on your next boot, the virus is loaded into your system and runs with the MBR.

Regarding the download of infected files and email attachments, boot sector viruses remain mostly harmless when you download them. However, when you open the malicious file, it then begins to infect the host machine. In many cases, the proprietor might’ve encoded instructions for the program to multiply and create batches to email your contacts.

Thankfully, the computer BIOS architecture has improved, and this has curbed (to a large extent) the spread of boot sector viruses. This development is due to the inclusion of the option to allow users to block codes from modifying the first sector of PC’s hard drives.

If you’ve never updated your BIOS, now’s a good time to do it.

Read: How to backup & restore Master Boot Record with MBR Backup or MDHacker.

How to remove a Boot Sector Virus

Most boot sector viruses can encrypt the MBR; your drive can get severely damaged if you don’t remove the virus properly.

On the other hand, if the virus doesn’t encrypt the MBR and only infects the boot sector, you can use the DOS SYS command the restore the bad sector.

Further, you can also use the DOS LABEL command to restore affected volume labels. If the infection is severe and beyond repair, you can replace the MBR with the use of the FDISK/MBR command.

While all of these methods may work for some cases, using a free bootable antivirus rescue software is the safest way to remove boot sector viruses. Most importantly, with antivirus software, you are unlikely to lose files and data saved on your hard drive.

Read: How to repair the Master Boot Record.

TRIVIA: The first MS-DOS PC virus was created in 1986 and it was the Brain virus. Brain was a boot sector virus and only infected 360k floppy disks. Interestingly, even though it was the first virus, it had the full-stealth capability. V-Sign was the first polymorphic boot sector virus.

Related posts

• Ku soo celi oo soo celi Qaybta Bootka & MBR oo leh HDHacker

• Fayrasku wuxuu beddelay dhammaan kordhinta faylkayga Windows 11/10 PC

• Fayraskaga iyo ilaalinta khatarta waxaa maamula ururkaaga

• Sidee ku heli kartaa fayraska kombiyuutarka, trojan, shaqada, spyware ama malware?

• Waa maxay lsass.exe gudaha Windows 10 iyo sidee lagu ogaan karaa haddii ay tahay Virus?

• Ka soo kabso faylalka fayraska ku dhacay Qalinka Qalinka ah (2022)

• Ka soo kabso faylalka fayraska ku dhacay Qalinka Qalinka ah (2022)

• Waa maxay Ka-hortagga Virus-ka iyo Hanjabaada ee Daaqadaha? Sidee loo qariyaa?

• Sida loo hagaajiyo Google Chrome Virus-ka soo booda ee Android

• Kamarada FaceTime kuma shaqaynayso Windows 10 oo leh Boot Camp

• Hagaaji Qeexida Fayraska Ku Fashilantay Avast Antivirus

• Aaladaha ka saarida Malware ee bilaashka ah si meesha looga saaro Virus gaar ah Windows 11/10

• Fadlan u qaabee wadaha USB-ga sidii hal qayb oo FAT ah: Kaaliyaha Kaamka Boot

• Ku hagaaji Virus-ka ku soo booda Android

• Waa maxay COM Surrogate gudaha Windows 10 oo ma Virus-baa?

• 8-da Goobood ee ugu Fiican ee Baadhista iyo Ka Saaridda Virus-ka Online-ka ah

• Hagaaji qaladka diskka ama diskka aan nidaamka ahayn Shaashada madow ee Windows 11/10

• Bfsvc.exe: Ma badbaado baa mise waa Virus? Hagaha in si joogto ah looga saaro

• Setup BitLocker wuxuu ku guul daraystay inuu dhoofiyo dukaanka BCD (Xogta Isku xidhka Boot).

• Sida looga saaro Digniinta Virus-ka Microsoft ee Windows PC