🚀 go-pugleaf

cj@info.ucl.ac.be (Christine Jacqmot) writes:

> The boot sector has been modified with the following byte sequence:
> 08 01 00 02 00 02 00 00 F8 A0 00 1A 00 0E 00 1A

Are those the -first- few bytes of the boot sector? If yes, then the
boot sector does not contain a virus, it is just damaged. The damage
could have been done by a virus, but there is no virus in the boot
sector.

> The effect is the following one:
> whenever we try to read or write a floppy, the displayed message tells us
> that there is "0 byte free, 0 byte allocated" on the floppy and then,
> the contents of the diskette is lost.

The reason for this is that the Drive Parameter Block table in the
boot sector is damaged.

> The problems began after having used CDROM's which contain demo's of
> products available in sharewares (but maybe this is pure coincidence!)

The damage might have been caused by a buggy program, yes.

Regards,
Vesselin
- -- 
Vesselin Vladimirov Bontchev          Virus Test Center, University of Hamburg
Tel.:+49-40-54715-224, Fax: +49-40-54715-226      Fachbereich Informatik - AGN
< PGP 2.0 public key available on request. > Vogt-Koelln-Strasse 30, rm. 107 C
e-mail: bontchev@fbihh.informatik.uni-hamburg.de    D-2000 Hamburg 54, Germany