Puppy Linux Discussion Forum Forum Index Puppy Linux Discussion Forum
Puppy HOME page : puppylinux.com
"THE" alternative forum : puppylinux.info
 
 FAQFAQ   SearchSearch   MemberlistMemberlist   UsergroupsUsergroups   RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 

The time now is Wed 30 Jul 2014, 09:35
All times are UTC - 4
 Forum index » Off-Topic Area » Security
How to check Windows MBR code from Linux?
Post new topic   Reply to topic View previous topic :: View next topic
Page 2 of 2 [23 Posts]   Goto page: Previous 1, 2
Author Message
rcrsn51


Joined: 05 Sep 2006
Posts: 8926
Location: Stratford, Ontario

PostPosted: Wed 29 Jun 2011, 11:37    Post subject:  

Then you need a hex editor. I'm sure there is one available for Puppy.

[Edit] Or you could just use
Code:
hexdump mbr.bin
Back to top
View user's profile Send private message 
Bruce B


Joined: 18 May 2005
Posts: 11080
Location: The Peoples Republic of California

PostPosted: Wed 29 Jun 2011, 14:15    Post subject:  

I want to add, if anyone what to have a base MBR file to test against, the base file needs updating every time one repartitions his hard disk.

~

_________________
New! Puppy Linux Links Page
Back to top
View user's profile Send private message 
DPUP5520

Joined: 16 Feb 2011
Posts: 801

PostPosted: Wed 29 Jun 2011, 15:28    Post subject:  

rcrsn51 wrote:
Then you need a hex editor. I'm sure there is one available for Puppy.

[Edit] Or you could just use
Code:
hexdump mbr.bin



This is a nice easy/small hex editor
shed-1.15.pet
Description 
pet

 Download 
Filename  shed-1.15.pet 
Filesize  15.44 KB 
Downloaded  268 Time(s) 

_________________
PupRescue 2.5
Puppy Crypt 528
Back to top
View user's profile Send private message 
Sylvander

Joined: 15 Dec 2008
Posts: 3400
Location: West Lothian, Scotland, UK

PostPosted: Wed 29 Jun 2011, 16:38    Post subject:  

1. "Then you need a hex editor. I'm sure there is one available for Puppy."
(a) Ended up using wishbinvu-2009.pet [wishbinvu was recommended by Bugman], then installing tk-8.5.6.pet & tcl-8.5.6-v1.pet linked HERE.

(b) So now the program runs OK from the installed entry in the "Menu->Utility->General Utilities->Wish Binary Viewer".
Has a rather nice colorful [Orange] GUI! Very Happy
Used it to "Open" the mbr.bin file and was given the kind of display I want [the code content as seen in the screenshots below].
Was then able to save a copy with a name specified by me.
Would it be possible to use a file-content-comparison program to display differences?
00.jpg
 Description   
 Filesize   52.76 KB
 Viewed   928 Time(s)

00.jpg

01.jpg
 Description   
 Filesize   47.62 KB
 Viewed   933 Time(s)

01.jpg

Back to top
View user's profile Send private message 
d4p


Joined: 12 Mar 2007
Posts: 406

PostPosted: Thu 30 Jun 2011, 01:54    Post subject:  

If you get "Trojan:Win32/Popureb.E"

http://blogs.technet.com/b/mmpc/archive/2011/06/22/don-t-write-it-read-it-instead.aspx

fix the MBR first, and then restore/reinstall the system
Back to top
View user's profile Send private message 
piratesmack


Joined: 16 Sep 2009
Posts: 100

PostPosted: Sat 02 Jul 2011, 12:56    Post subject:  

If run without options, ms-sys will inspect your current boot record

e.g.
Code:

# ms-sys mbr.bin
mbr.bin has an x86 boot sector,
it is a Microsoft 2000/XP/2003 master boot record, like the one this
program creates with the switch -m on a hard disk device.


Note: Last time I checked Puppy came with an old version of ms-sys, so it might not recognize the boot record for newer versions of Windows.
Back to top
View user's profile Send private message 
Flash
Official Dog Handler


Joined: 04 May 2005
Posts: 10944
Location: Arizona USA

PostPosted: Sat 02 Jul 2011, 15:29    Post subject:  

ms-sys --help gives a list of options and arguments.

ms-sys --version gives the version in Puppy.

_________________
Puppy Help 101 - an interactive tutorial for Lupu 5.25
Back to top
View user's profile Send private message 
Lobster
Official Crustacean


Joined: 04 May 2005
Posts: 15117
Location: Paradox Realm

PostPosted: Wed 06 Jul 2011, 10:45    Post subject:  

thought this might be of interest . . .
http://www.ntfs.com/mbr-damaged.htm

_________________
Puppy WIKI
Back to top
View user's profile Send private message Visit poster's website 
Display posts from previous:   Sort by:   
Page 2 of 2 [23 Posts]   Goto page: Previous 1, 2
Post new topic   Reply to topic View previous topic :: View next topic
 Forum index » Off-Topic Area » Security
Jump to:  

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum


Powered by phpBB © 2001, 2005 phpBB Group
[ Time: 0.0600s ][ Queries: 13 (0.0049s) ][ GZIP on ]