Puppy Linux Discussion Forum Forum Index Puppy Linux Discussion Forum
Puppy HOME page : puppylinux.com
"THE" alternative forum : puppylinux.info
 
 FAQFAQ   SearchSearch   MemberlistMemberlist   UsergroupsUsergroups   RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 

The time now is Wed 26 Nov 2014, 22:56
All times are UTC - 4
 Forum index » Off-Topic Area » Security
How to check Windows MBR code from Linux?
Post_new_topic   Reply_to_topic View_previous_topic :: View_next_topic
Page 2 of 2 Posts_count   Goto page: Previous 1, 2
Author Message
rcrsn51


Joined: 05 Sep 2006
Posts: 9260
Location: Stratford, Ontario

PostPosted: Wed 29 Jun 2011, 11:37    Post_subject:  

Then you need a hex editor. I'm sure there is one available for Puppy.

[Edit] Or you could just use
Code:
hexdump mbr.bin
Back to top
View user's profile Send_private_message 
Bruce B


Joined: 18 May 2005
Posts: 11131
Location: The Peoples Republic of California

PostPosted: Wed 29 Jun 2011, 14:15    Post_subject:  

I want to add, if anyone what to have a base MBR file to test against, the base file needs updating every time one repartitions his hard disk.

~

_________________
New! Puppy Linux Links Page
Back to top
View user's profile Send_private_message 
DPUP5520

Joined: 16 Feb 2011
Posts: 801

PostPosted: Wed 29 Jun 2011, 15:28    Post_subject:  

rcrsn51 wrote:
Then you need a hex editor. I'm sure there is one available for Puppy.

[Edit] Or you could just use
Code:
hexdump mbr.bin



This is a nice easy/small hex editor
shed-1.15.pet
Description 
pet

 Download 
Filename  shed-1.15.pet 
Filesize  15.44 KB 
Downloaded  296 Time(s) 

_________________
PupRescue 2.5
Puppy Crypt 528
Back to top
View user's profile Send_private_message 
Sylvander

Joined: 15 Dec 2008
Posts: 3518
Location: West Lothian, Scotland, UK

PostPosted: Wed 29 Jun 2011, 16:38    Post_subject:  

1. "Then you need a hex editor. I'm sure there is one available for Puppy."
(a) Ended up using wishbinvu-2009.pet [wishbinvu was recommended by Bugman], then installing tk-8.5.6.pet & tcl-8.5.6-v1.pet linked HERE.

(b) So now the program runs OK from the installed entry in the "Menu->Utility->General Utilities->Wish Binary Viewer".
Has a rather nice colorful [Orange] GUI! Very Happy
Used it to "Open" the mbr.bin file and was given the kind of display I want [the code content as seen in the screenshots below].
Was then able to save a copy with a name specified by me.
Would it be possible to use a file-content-comparison program to display differences?
00.jpg
 Description   
 Filesize   52.76 KB
 Viewed   943 Time(s)

00.jpg

01.jpg
 Description   
 Filesize   47.62 KB
 Viewed   946 Time(s)

01.jpg

Back to top
View user's profile Send_private_message 
d4p


Joined: 12 Mar 2007
Posts: 407

PostPosted: Thu 30 Jun 2011, 01:54    Post_subject:  

If you get "Trojan:Win32/Popureb.E"

http://blogs.technet.com/b/mmpc/archive/2011/06/22/don-t-write-it-read-it-instead.aspx

fix the MBR first, and then restore/reinstall the system
Back to top
View user's profile Send_private_message 
piratesmack


Joined: 16 Sep 2009
Posts: 100

PostPosted: Sat 02 Jul 2011, 12:56    Post_subject:  

If run without options, ms-sys will inspect your current boot record

e.g.
Code:

# ms-sys mbr.bin
mbr.bin has an x86 boot sector,
it is a Microsoft 2000/XP/2003 master boot record, like the one this
program creates with the switch -m on a hard disk device.


Note: Last time I checked Puppy came with an old version of ms-sys, so it might not recognize the boot record for newer versions of Windows.
Back to top
View user's profile Send_private_message 
Flash
Official Dog Handler


Joined: 04 May 2005
Posts: 11164
Location: Arizona USA

PostPosted: Sat 02 Jul 2011, 15:29    Post_subject:  

ms-sys --help gives a list of options and arguments.

ms-sys --version gives the version in Puppy.

_________________
Puppy Help 101 - an interactive tutorial for Lupu 5.25
Back to top
View user's profile Send_private_message 
Lobster
Official Crustacean


Joined: 04 May 2005
Posts: 15117
Location: Paradox Realm

PostPosted: Wed 06 Jul 2011, 10:45    Post_subject:  

thought this might be of interest . . .
http://www.ntfs.com/mbr-damaged.htm

_________________
Puppy WIKI
Back to top
View user's profile Send_private_message Visit_website 
Display_posts:   Sort by:   
Page 2 of 2 Posts_count   Goto page: Previous 1, 2
Post_new_topic   Reply_to_topic View_previous_topic :: View_next_topic
 Forum index » Off-Topic Area » Security
Jump to:  

Rules_post_cannot
Rules_reply_cannot
Rules_edit_cannot
Rules_delete_cannot
Rules_vote_cannot
You cannot attach files in this forum
You can download files in this forum


Powered by phpBB © 2001, 2005 phpBB Group
[ Time: 0.0603s ][ Queries: 13 (0.0047s) ][ GZIP on ]