|
Posted by Richard Urban on April 14, 2008, 12:20 pm
If you were Registered and logged in, you could reply and use other advanced thread options
MBR and make the drive usable again. I use what ""I"" know is best for me. I
recommend the same to others.
>
>> Boot using a DOS setup floppy (latest/last version).
>>
>> Type fdisk /mbr
>>
>> The /mbr is an undocumented call that will replace the mbr on the master
>> hard drive. It is best to physically disconnect all other hard drives
>> when performing this call to prevent any unwanted actions due to multiple
>> hard drives being connected.
>
> Care must be taken to ensure that the correct MBR code
> is what replaces the existing code. Why do you assume
> the "latest/last" DOS version is the correct one for the
> OP's system?
>
>>> Indeed, Kurt. Thank you for your response.
>>>
>>> A quote from Computer Active
>>>
http://www.computeractive.co.uk/computeractive/news/2207251/mebroot-attack-takes-security
>>>
>>> "Mebroot, which is designed to steal personal information and bank
>>> details, is embedded in legitimate websites.
>>> If the latest updates and patches for browsers or the XP operating
>>> system have been applied, then anti-virus software can stop the rootkit
>>> and the associate malware such as keystroke loggers and others it
>>> downloads.
>>>
>>> But if patches have not been applied the malware downloads to a PC and
>>> then hides from security software. It can be removed quite simply,
>>> according to Hypponen, but currently only by the user rewriting the
>>> MBR".
>>>
>>> My question remains. HOW does a user rewrite the MBR.
>>>
>>> Many thanks to anyone who can provide the answer!
>>>
>>> --
>>>
>>> Dave
>>>
>>>
>>>
>>>
>>>
>>>
>>
>
| 
XML site map