Article View: ch.comp.os.linux
Article #24728Re: Virus Problem mit PARITY B!
From: Gunther Doernen
Date: Fri, 22 Jan 1999 00:00
Date: Fri, 22 Jan 1999 00:00
49 lines
2412 bytes
2412 bytes
Jonathan Apfelkern wrote: > In article <36A6E31B.6976344@berit.ch>, > Gunther Doernen <gunther.doernen@berit.ch> was blubbering: > > Marc SCHAEFER wrote: > > > >> Gunther Doernen <gunther.doernen@berit.ch> wrote: > >> > Der Virus scheint aber nachwievor auf der Linux Platte aktiv zu sein > >> > (laut Dr.Solomon) !? > >> > >> it's possible. Run Linux and reinstall LILO, this will clear the > >> boot block on the partition. > > > > I have tried and done this allready, .... > > but that clears not the partition sector, the place of the virus. > > (partition sector is copied to sector 4, tells Dr. Solomon) > > Hah! Go for it, run Linux and do some > "dd if=/dev/hda of=partition.sect bs=512 skip=3 count=4" > to get the partition table into a file and then copy it back to > the position where it belongs. Or something along these > lines. Of course, you'd better do a "man dd" before you > do anything with it, it's very easy to screw up your system > with that. > Jonathan > -- > "take USABLE from UNSTABLE and you get NT" Thanks, I go for it ......I have tried to have access to the partition sector (located at cyl:0, head:0, sector: 1) of my harddisk with dd if=/dev/sdb1 ..... but it seems, I have only access starting at the boot sector (located at cyl:0, head:1, sector: 1) ? How can I access the partition sector and the copy of the original partition sector (located at cyl:0, head:1, sector: 14 <= sorry, not 4, I told wrong first)? Gunther -- ############################################### # # Gunther Doernen (gunther.doernen@berit.ch) # Berit AG # Netzibodenstrasse 33 # CH - 4133 Pratteln (Basel) # http://www.berit.com # http://home.t-online.de/home/guntherd ###############################################
Technical Details
Message-ID:
<36A83093.2B690926@berit.ch>Path:
arc1-ca.pugleaf.net!unknown!not-for-mailReferences:
<36A5CF67.D5ED2C0F@berit.ch> <785mgl$cee$1@vulcan.alphanet.ch> <36A6E31B.6976344@berit.ch> <newscache$oxiw5f$18a@cache>Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: f4b73,74662eff34a73f4d X-Google-Attributes: gidf4b73,public From: Gunther Doernen <gunther.doernen@berit.ch> Subject: Re: Virus Problem mit PARITY B! Date: 1999/01/22 Message-ID: <36A83093.2B690926@berit.ch> X-Deja-AN: 435548621 Content-Transfer-Encoding: 7bit References: <36A5CF67.D5ED2C0F@berit.ch> <785mgl$cee$1@vulcan.alphanet.ch> <36A6E31B.6976344@berit.ch> <newscache$oxiw5f$18a@cache> To: jonathan@discordia.ch Content-Type: text/plain; charset=us-ascii Organization: BERIT AG (Schweiz) Mime-Version: 1.0 Newsgroups: ch.comp.os.linux