Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.


Avira detected BOO/Cidox.B - how do I fix it?

  • This topic is locked This topic is locked
2 replies to this topic

#1 wmcot


  • Members
  • 34 posts
  • Gender:Male
  • Location:Salt Lake City, Utah
  • Local time:06:10 AM

Posted 29 December 2013 - 07:04 PM

I have a good friend who dropped his laptop off for me to look at.  It was continually re-booting after showing a quick error message.


The machine is an HP laptop running Windows 7.


I started his machine in Safe mode and ran MalwareBytes.  It cleared out a few smaller items, but both MalwareBytes and Avira reported BOO/Cidox.B in the boot sector.


Is there a way to remove/repair this without low-levelling the drive?  He has a bunch of photos and other business stuff on the laptop.


He says that the problem occurred when he opened an email from "Costco" which I'm sure was a fake.


I have searched the 'net and not found much info about this.


Any help & suggestions would be appreciated.

BC AdBot (Login to Remove)


#2 sikntired


  • Members
  • 1,068 posts
  • Gender:Male
  • Location:USA
  • Local time:07:10 AM

Posted 29 December 2013 - 08:51 PM

Unfortunately this may be a Rootkit that might have affected the MBR.

I encourage you to seek assistance from our Malware Response Team.



Good Luck

#3 hamluis



  • Moderator
  • 56,284 posts
  • Gender:Male
  • Location:Killeen, TX
  • Local time:07:10 AM

Posted 30 December 2013 - 11:42 AM

OP reposted in AII forum, this topic is now closed to avoid confusion.



0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users