From owner-freebsd-questions Mon Apr 26 13:18:11 1999 Delivered-To: freebsd-questions@freebsd.org Received: from kachina.som.siu.edu (kachina.som.siu.edu [131.230.167.130]) by hub.freebsd.org (Postfix) with ESMTP id B28A9152BA for ; Mon, 26 Apr 1999 13:18:04 -0700 (PDT) (envelope-from parrothd@midwest.net) Received: from tlingle (webct.som.siu.edu [131.230.167.194]) by kachina.som.siu.edu (8.7.3/8.7.3) with SMTP id PAA09079; Mon, 26 Apr 1999 15:17:56 -0500 (CDT) Message-Id: <199904262017.PAA09079@kachina.som.siu.edu> X-Sender: parrothd@mail.midwest.net X-Mailer: QUALCOMM Windows Eudora Pro Version 4.0 Date: Mon, 26 Apr 1999 15:22:40 -0500 To: "Benjamin T. George" From: "Jonathan E. Lyons" Subject: Re: Accessing Virus Infected (Boot Sector) HDD Cc: freebsd-questions@FreeBSD.ORG In-Reply-To: <3724C63C.F81FA429@3-cities.com> References: <3724CD47.794BDF32@thekeyboard.com> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG Have you tried ndd.exe (older version of norton disk doctor) you may get lucky and be able to rebuild the FAT table.. At 01:02 PM 4/26/99 -0700, Kent Stewart wrote: >Not likely. Your first MB is where FAT, directory, and boot >information go. You can recover the boot but the FAT and directory are >gone forever. Since not all of your files will be loaded in contiguous >locations, the random offsets are gone forever. > >Kent To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message