Re: Do I have a virus?
On Fri, Oct 29, 1999 at 07:06:38AM -0700, aphro wrote: try bootin form a boot disk and hittin sys a: c: [I'm a couple of weeks behind.] I can't believe the bad advice going on in this thread. Is LILO a completely black art or something? It's really quite simple! I believe your suggestion about will overwrite MSDOS.SYS (Win95's boot-time configuration file) with one which tells it not to boot into the GUI. Hence it is not a good idea. Hamish -- Hamish Moffatt VK3SB. CCs of replies on mailing lists are welcome.
Re: Do I have a virus?
Don Galloway wrote: i thought /mbr was supposed to be /MBR ? i could be wrong though. Remember, this is DOS; CaSE doEsn'T mattER. :-)
Re: Do I have a virus?
i thought /mbr was supposed to be /MBR ? i could be wrong though. also you could use say partition magic an make sure that windows is the active boot partition On Fri, 29 Oct 1999, David Punsalan wrote: A friend of mine (not me...I'm just writing this e-mail for him - yeah, that's it) decided to remove debian from my...uh...I mean his PC and he's tried several things to make lilo go away so he can go back to his normal win98 life: 1. typed 'fdisk /mbr' at both c:\ and c:\windows\command 2. completely erased linux native and swap partitions Yet...after restarting the computer...low and behold - lilo kicks in, and proceeds to attempt to boot debian. Could there be a virus here? I'd really appreciate a reply. Thanks. - David -- Unsubscribe? mail -s unsubscribe [EMAIL PROTECTED] /dev/null
Re: Do I have a virus?
1. Make sure Virus protection in your BIOS is off 2. Boot from a Win95 boot disk 3. Locate SYS.COM (I think it's in C:\WINDOWS\COMMAND) 4. run SYS.COM A: C:\ 5. run fdisk /mbr (win95 fdisk, not linux fdisk) On Fri, Oct 29, 1999 at 01:05:08PM +, Martyn Pearce wrote: Nico De Ranter writes: | Nope, I've had the same problem. Can it be that lilo changes | something in the bootable partition and not only in the mbr? In that | case fdisk /mbr won't be able to help. lilo certainly can be installed at the beginnng of an ext2 partition. However, I've discounted this because fdisk /mbr should remove any code causing the jump to any other partition. Long Shot --- have you checked the bootable flags with (preferably linux) fdisk? The boot code that DOS fdisk installs may well observe these, and if set to an old Linux partition, might attempt to jump there, causing a lilo boot. Mx. -- I already have all the latest software. -- Laura Winslow, Family Matters Dwayne C. Litzenberger - [EMAIL PROTECTED] Advertising Policy: http://DLitzPower.tripod.com/spamoff.htm GnuPG Public Key: http://DLitzPower.tripod.com/gpgkey.asc Fingerprint: 0535 F7CF FF5F 8547 E5A5 695E 4456 FB6C BC39 A4B0 pgpM6RvdeO4AK.pgp Description: PGP signature
Re: Do I have a virus?
What's proabably happened is that you have LILO installed on a partition boot record rather than the MBR, and that partition is still active. Make sure that DOS's FDISK has the correct partition listed as A, and run sys c: to overwrite the partition MBR. On Fri, Oct 29, 1999 at 04:51:03AM -0500, David Punsalan wrote By the way - are there any known Linux Boot Viruses out there? symptom: lilo won't go away. it's phenomenal. I've completely gotten rid of linux (to my knowledge) off the hard drive - and lilo STILL shows up! Where is it coming from?!?! A friend of mine (not me...I'm just writing this e-mail for him - yeah, that's it) decided to remove debian from my...uh...I mean his PC and he's tried several things to make lilo go away so he can go back to his normal win98 life: 1. typed 'fdisk /mbr' at both c:\ and c:\windows\command 2. completely erased linux native and swap partitions Yet...after restarting the computer...low and behold - lilo kicks in, and proceeds to attempt to boot debian. Could there be a virus here? I'd really appreciate a reply. Thanks. - David -- Unsubscribe? mail -s unsubscribe [EMAIL PROTECTED] /dev/null John P. -- [EMAIL PROTECTED] [EMAIL PROTECTED] Oh - I - you know - my job is to fear everything. - Bill Gates in Denmark
Do I have a virus?
A friend of mine (not me...I'm just writing this e-mail for him - yeah, that's it) decided to remove debian from my...uh...I mean his PC and he's tried several things to make lilo go away so he can go back to his normal win98 life: 1. typed 'fdisk /mbr' at both c:\ and c:\windows\command 2. completely erased linux native and swap partitions Yet...after restarting the computer...low and behold - lilo kicks in, and proceeds to attempt to boot debian. Could there be a virus here? I'd really appreciate a reply. Thanks. - David
Re: Do I have a virus?
By the way - are there any known Linux Boot Viruses out there? symptom: lilo won't go away. it's phenomenal. I've completely gotten rid of linux (to my knowledge) off the hard drive - and lilo STILL shows up! Where is it coming from?!?! A friend of mine (not me...I'm just writing this e-mail for him - yeah, that's it) decided to remove debian from my...uh...I mean his PC and he's tried several things to make lilo go away so he can go back to his normal win98 life: 1. typed 'fdisk /mbr' at both c:\ and c:\windows\command 2. completely erased linux native and swap partitions Yet...after restarting the computer...low and behold - lilo kicks in, and proceeds to attempt to boot debian. Could there be a virus here? I'd really appreciate a reply. Thanks. - David
Re: Do I have a virus?
Rerun the win98 installation program. That will overwrite the mbr, and kill lilo. It won't mess with your normal life win98 setttings either, except for maybe a few very small things. -Aaron Solochek [EMAIL PROTECTED] David Punsalan wrote: By the way - are there any known Linux Boot Viruses out there? symptom: lilo won't go away. it's phenomenal. I've completely gotten rid of linux (to my knowledge) off the hard drive - and lilo STILL shows up! Where is it coming from?!?! A friend of mine (not me...I'm just writing this e-mail for him - yeah, that's it) decided to remove debian from my...uh...I mean his PC and he's tried several things to make lilo go away so he can go back to his normal win98 life: 1. typed 'fdisk /mbr' at both c:\ and c:\windows\command 2. completely erased linux native and swap partitions Yet...after restarting the computer...low and behold - lilo kicks in, and proceeds to attempt to boot debian. Could there be a virus here? I'd really appreciate a reply. Thanks. - David -- Unsubscribe? mail -s unsubscribe [EMAIL PROTECTED] /dev/null
Re: Do I have a virus?
If you ever need to remove Linux from a friend's PC again :-), run lilo -u before removing the linux partition. That should uninstall lilo from the mbr. Nico On Fri, 29 Oct 1999, David Punsalan wrote: A friend of mine (not me...I'm just writing this e-mail for him - yeah, that's it) decided to remove debian from my...uh...I mean his PC and he's tried several things to make lilo go away so he can go back to his normal win98 life: 1. typed 'fdisk /mbr' at both c:\ and c:\windows\command 2. completely erased linux native and swap partitions Yet...after restarting the computer...low and behold - lilo kicks in, and proceeds to attempt to boot debian. Could there be a virus here? I'd really appreciate a reply. Thanks. - David -- Unsubscribe? mail -s unsubscribe [EMAIL PROTECTED] /dev/null Three things are certain: Death, taxes, and lost data. Guess which has occurred. Nico De Ranter Sony Service Center (SUPC-E/NSSE) Sint Stevens Woluwestraat 55 (Rue de Woluwe-Saint-Etienne) 1130 Brussel (Bruxelles), Belgium, Europe, Earth Telephone: +32 2 724 86 41 Telefax: +32 2 726 26 86 e-mail: [EMAIL PROTECTED]
Re: Do I have a virus?
| A friend of mine (not me...I'm just writing this e-mail for him - yeah, | that's it) decided to remove debian from my...uh...I mean his PC and he's | tried several things to make lilo go away so he can go back to his normal | win98 life: | | 1. typed 'fdisk /mbr' at both c:\ and c:\windows\command Curious that fdisk didn't do it. Might be worth checking the BIOS settings --- some M/Bs have a virus protection mechanism that, when enabled, prevents anything writing to the first sector of the hard disk. Mx.
Re: Do I have a virus?
On 29 Oct 1999, Martyn Pearce wrote: | A friend of mine (not me...I'm just writing this e-mail for him - yeah, | that's it) decided to remove debian from my...uh...I mean his PC and he's | tried several things to make lilo go away so he can go back to his normal | win98 life: | | 1. typed 'fdisk /mbr' at both c:\ and c:\windows\command Curious that fdisk didn't do it. Might be worth checking the BIOS settings --- some M/Bs have a virus protection mechanism that, when enabled, prevents anything writing to the first sector of the hard disk. Nope, I've had the same problem. Can it be that lilo changes something in the bootable partition and not only in the mbr? In that case fdisk /mbr won't be able to help. Nico Mx. -- Unsubscribe? mail -s unsubscribe [EMAIL PROTECTED] /dev/null Three things are certain: Death, taxes, and lost data. Guess which has occurred. Nico De Ranter Sony Service Center (SUPC-E/NSSE) Sint Stevens Woluwestraat 55 (Rue de Woluwe-Saint-Etienne) 1130 Brussel (Bruxelles), Belgium, Europe, Earth Telephone: +32 2 724 86 41 Telefax: +32 2 726 26 86 e-mail: [EMAIL PROTECTED]
Re: Do I have a virus?
Nico De Ranter writes: | Nope, I've had the same problem. Can it be that lilo changes | something in the bootable partition and not only in the mbr? In that | case fdisk /mbr won't be able to help. lilo certainly can be installed at the beginnng of an ext2 partition. However, I've discounted this because fdisk /mbr should remove any code causing the jump to any other partition. Long Shot --- have you checked the bootable flags with (preferably linux) fdisk? The boot code that DOS fdisk installs may well observe these, and if set to an old Linux partition, might attempt to jump there, causing a lilo boot. Mx.
Re: Do I have a virus?
try bootin form a boot disk and hittin sys a: c: and fdisk /mbr again (from boot disk) nate [mailto:[EMAIL PROTECTED] ]-- Vice President Network Operations http://www.firetrail.com/ Firetrail Internet Services Limited http://www.aphroland.org/ Everett, WA 425-348-7336http://www.linuxpowered.net/ Powered By:http://comedy.aphroland.org/ Debian 2.1 Linux 2.0.36 SMPhttp://yahoo.aphroland.org/ -[mailto:[EMAIL PROTECTED] ]-- On Fri, 29 Oct 1999, David Punsalan wrote: A friend of mine (not me...I'm just writing this e-mail for him - yeah, that's it) decided to remove debian from my...uh...I mean his PC and he's tried several things to make lilo go away so he can go back to his normal win98 life: 1. typed 'fdisk /mbr' at both c:\ and c:\windows\command 2. completely erased linux native and swap partitions Yet...after restarting the computer...low and behold - lilo kicks in, and proceeds to attempt to boot debian. Could there be a virus here? I'd really appreciate a reply. Thanks. - David -- Unsubscribe? mail -s unsubscribe [EMAIL PROTECTED] /dev/null
Re: Do I have a virus?
i have never heard of a linux virus, don't think one exists.. there are worms, backdoors, exploits ..but virus?? nh. you should take this as a sign, drop win* and use linux :) (saw you had probs with debian, maybe try something else first? debian is hardly for beginners) nate [mailto:[EMAIL PROTECTED] ]-- Vice President Network Operations http://www.firetrail.com/ Firetrail Internet Services Limited http://www.aphroland.org/ Everett, WA 425-348-7336http://www.linuxpowered.net/ Powered By:http://comedy.aphroland.org/ Debian 2.1 Linux 2.0.36 SMPhttp://yahoo.aphroland.org/ -[mailto:[EMAIL PROTECTED] ]-- On Fri, 29 Oct 1999, David Punsalan wrote: By the way - are there any known Linux Boot Viruses out there? symptom: lilo won't go away. it's phenomenal. I've completely gotten rid of linux (to my knowledge) off the hard drive - and lilo STILL shows up! Where is it coming from?!?! A friend of mine (not me...I'm just writing this e-mail for him - yeah, that's it) decided to remove debian from my...uh...I mean his PC and he's tried several things to make lilo go away so he can go back to his normal win98 life: 1. typed 'fdisk /mbr' at both c:\ and c:\windows\command 2. completely erased linux native and swap partitions Yet...after restarting the computer...low and behold - lilo kicks in, and proceeds to attempt to boot debian. Could there be a virus here? I'd really appreciate a reply. Thanks. - David -- Unsubscribe? mail -s unsubscribe [EMAIL PROTECTED] /dev/null
Re: Do I have a virus?
On Fri, 29 Oct 1999, David Punsalan wrote: By the way - are there any known Linux Boot Viruses out there? symptom: lilo won't go away. Not a virus. It's lilo. it's phenomenal. I've completely gotten rid of linux (to my knowledge) off the hard drive - and lilo STILL shows up! Where is it coming from?!?! It's in the master boot record. from DOS, 'fdisk /mbr' should straighten it out. However, this won't work if you had Windows on your second disk. In that case, the second disk needs to become the first disk. I think you may need to boot off floppy for fdisk /mbr to work. Finally, you might try 'sys c:' in case you installed LILO onto your windows partition somehow (?). For this you'll definitely need to boot off floppy. You also need to make sure your windows partition is active. But why do you want to get rid of linux?
Re: Do I have a virus?
Nico De Ranter writes: Nope, I've had the same problem. Can it be that lilo changes something in the bootable partition and not only in the mbr? Yes. The Debian install puts lilo on the bootable Linux partition. -- John HaslerThis posting is in the public domain. [EMAIL PROTECTED]Do with it what you will. Dancing Horse Hill Make money from it if you can; I don't mind. Elmwood, Wisconsin Do not send email advertisements to this address.
Re: Do I have a virus?
On Fri, Oct 29, 1999 at 02:24:52AM -0500, David Punsalan wrote: A friend of mine (not me...I'm just writing this e-mail for him - yeah, that's it) decided to remove debian from my...uh...I mean his PC and he's tried several things to make lilo go away so he can go back to his normal win98 life: 1. typed 'fdisk /mbr' at both c:\ and c:\windows\command 2. completely erased linux native and swap partitions Yet...after restarting the computer...low and behold - lilo kicks in, and proceeds to attempt to boot debian. Could there be a virus here? I'd really appreciate a reply. Sorry, can't resist passing this up. I do believe there is a computer virus known as WinBillBlows98 floating around. This virus looks deceptivly like an operating system, but will crash your computer, overwrite other OS's, and so on. (: Seriously, reinstalling Windows will wipe out lilo or if you have a save copy of the MBR, reinstalling it will also work. Others on the list have enumerated other ways and how to reinstall the MBR. I've messed up and had to do this myself since I forgot to include dos in my lilo.conf file. Typical newbie boo-boo. What I did is I did save a copy of the MBR in Debian and did a dd command. (This is a bit risky and there is some info in on this website on how to do this. ) Don't recall offhand where. But it is a surefire way to clear out lilo. Hope it comes in handy later for you. Perhaps someone with a better memory has the details on this. -- Cliff
