From owner-freebsd-questions Mon Apr 26 12:33:51 1999 Delivered-To: freebsd-questions@freebsd.org Received: from mail.cannet.com (cannet.com [206.156.188.2]) by hub.freebsd.org (Postfix) with SMTP id 5FA9E14C8B for ; Mon, 26 Apr 1999 12:33:50 -0700 (PDT) (envelope-from beng%thekeyboard.com@all-ts1-dyn08.cannet.com) Received: from all-ts1-dyn08.cannet.com by mail.cannet.com id aa21855; 26 Apr 1999 15:34 EDT Message-ID: <3724CD47.794BDF32@thekeyboard.com> Date: Mon, 26 Apr 1999 15:32:07 -0500 From: "Benjamin T. George" X-Mailer: Mozilla 2.02 (X11; I; FreeBSD 3.1-RELEASE i386) MIME-Version: 1.0 To: freebsd-questions@freebsd.org Subject: Accessing Virus Infected (Boot Sector) HDD Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG Hello, I just got my FreeBSD 3.1-R system up and running (with XFree86 and a mail program and everything), and my Winblows 98 system got hit by the Win95/CIH virus. (Luckily I have this system too, so I'm not without a running computer :-). Anyway, the computer is a P5-120 (it's a few years old) so it doesn't have a flash BIOS (luckily... since the virus attempts to attack it and then you have bigger problems). So, the only damage done, was the first megabyte of the disk drive was overwritten. I don't have a backup of the drive because i just use it for home use, and I wasn't expecting a virus (and I need some of the files off the drive!). So, *MY QUESTION IS*: can I put the hard drive in my FreeBSD machine, and mount it as a DOS partition so I can retrieve the files a needed? Remember, the first MB of the drive isn't there, so there's no boot sector or anything available. PLEASE HELP! Thanks in advance. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message