home *** CD-ROM | disk | FTP | other *** search
-
-
-
- FixFBR 2.0 - Fix Floppy Boot Record
-
- Copyright (C) 1992, 1993 by Padgett, all rights reserved
-
-
- FixFBR is a generic anti-virus program and repair tool for
- infected and corrupted boot records on floppy disks. Since I do
- not have 2.88 MB disk drive, repair is confined to 360k & 1.2 Mb
- 5 1/4" and 720k & 1.44 Mb 3 1/2" floppy disks formatted with DOS
- 2.0 or later for this version. It has been tested through MS-DOS
- 6.0 / PC-DOS 6.1 / DR-DOS 6.0.
-
- FixFBR was designed for repair of infected floppy disks when
- SYS either does not work or it is undesirable to fill the disk
- with boot files.
-
- FixFBR first checks the disk for a valid Boot Parameter
- Block (BPB) and does a generic test for infection/corruption.
- Once the disk has been identified (and the user has an option to
- change if incorrect), the complete boot record is replaced with
- non-bootable but error checking and flagging code.
-
- FixFBR is invoked very simply: with the subject disk in any
- floppy drive, enter FIXFBR <drive letter>. The disk will be
- checked and identified and the user will be asked for
- corroboration (Y). If granted, the disk will be processed. If not
- granted, the user will be asked to select from a table of
- possible disk types. A Q(uit) entered at any request will
- terminate the program.
-
- When processed, the BR will contain error checking code used
- successfully in a number of past products (DiskSecure, FixMBR,
- SafeMBR, etc) following "Padgett's Rules" that, coupled with user
- awareness, has proven effective in detecting every BR infector
- tested.
-
- Two means of validation are possible: first, booting from a
- FixFBR processed floppy will result in the display of a logo and
- warning message. If corruption is detected a further warning will
- appear. Note that some viruses replace the Boot Record
- completely. In this case the logo will not appear which should be
- cause for concern in itself. Additionally, the CHKBOOT program
- will identify the disk id as "Padgett" for a DOS-level check.
- Note however that some malicious software will maintain the BPB
- so this is not a 100% check (however CHKBOOT makes other tests
- also, many tests).
-
- FixFBR has been designed for rapid examination / repair of
- multiple floppies. For this reason all the user needs to do for
- a stack of floppies that are known is to invoke FIXFBR once with
- the floppy drive letter (A or B), insert the floppy and press "Y"
- twice. This may be repeated for as many floppies as desired.
-
- Note: While FixMBR is able to "defang" Boot Record Viruses
- that it has come up against, it cannot repair other damage that
- may have occured. Stoned for instance also overwrites the end of
- the root directory area. Consequently, while an infected disk is
- often fully functional after repair, effects may still occur long
- after the virus has been forgotten. Effective backups are your
- best protection from loss.
-
-
- NOTE: The boot sector validity check in FIXFBR was deliberately
- made rigorous - it is possible that some legitemate floppy
- disk boot records may trigger a warning - in particular,
- FORM virus family detection may result in some ZENITH -
- ZDS formatted disks being flagged as "suspect". This should
- be used as a guide only. See the CHKBOOT documentation in
- CHK.DOC for further information.
-
-
- FREEWARE NOTICE
-
- FIXFBR2 is FREEWARE and may be used by individuals without
- charge so long as no changes are made. Corporations or agencies
- wishing a custom logo, messages, or actions should contact the
- author.
-
- The SafeFBR code is FREEWARE and may be used as extensively
- as wished however it is copyrighted material and no changes to
- the code are permitted without authorization.
-
- Disclaimer: While FixFBR has been tested as extensively as I
- am able with limited resources, every possible condition cannot
- be anticipated. Hence any use is entirely at the user's own risk.
-
- Padgett Peterson
- POB 1203
- Windermere, Florida, USA 34786
- I-net padgett@tccslr.dnet.mmc.com
-
-
- Revisions: 2.0 1993 - extensive checks added
- 1.1a 1992 - made compatible with Zenith ZDS 3.3
- 1.1 1992 - correction to ASCII
- 1.0 1992 - first release
-
-