
Thus spake James Harper:
Does anyone know of any Linux tools for picking up the latest windows bootsector viruses?
If it's a Windows boot sector virus, just boot up your Windows CD and repair the boot loader. No need unnecessarily complicating matters by using a Linux CD that won't do the job properly anyway.
I mean, where are you going to get a copy of a binary blob Windows boot sector from, anyway? Oh yeah, from Windows.
For Windows XP, 2003, 2000, that will involve starting the Recovery Console (by booting off the CD and typing R when prompted), typing 'fixboot', then 'fixmbr', and rebooting.
For Windows Vista, it will involve the 'bootsect' command, but I can't remember the exact switch off-hand. (See 'bootsect /?' which give you more than sufficient explanation.)
If neither of the above fixes your problem, then you've got bigger problems than just boot sector viruses.
The bootloader has some extra HP stuff on there so I don't just want to blindly replace it. I want to _know_ that it has malicious code embedded. James