Re: [Fwd: XP does something to the MBR (?)]

[S.Hockenhull]

On July 16, 2004 16:15, Sam Bucovetsky wrote:
> I have disabled the anti-virus programme (Norton) in Windows, so that it
> does not run at startup. Before disabling it, I also checked for viruses
> in Windows, and there were none. (I don't think a virus is likely, since
> I have never used Windows for e-mail on this computer.)
>

I heard something about a tax program a while ago that stored its anti-copy 
info in the first track of the first HD without warning.

(WARNING for the next instructions:
*** CAREFULL not to overwrite your HD track instead of dumping it. ***)

as a check, boot linux, re-install grub, make a "dd" dump of the first HD 
("/dev/hda", not "/dev/hda1") track ((sectors-per-track * 512) but 1 MiB 
should be enough), reboot, return to linux, dump that track a 2nd time and 
binary-compare them to make sure they're identical (should be).
then boot XP, reboot into linux using a grub floppy disk and make a 3rd dump 
and compare.

(WARNING (in case you skipped it, cant say I didnt warn you;)
*** CAREFULL not to overwrite your HD track instead of dumping it. ***)

-- 
Stephane Hockenhull