『楼 主』:
有关硬盘主引导区的几个问题？
使用 LLM 解释/回答一下
通过百度知道：广义的MBR整整一个扇区，512字节。
第一部分：boot loader （446字节）
第二部分：DPT （ 64字节）
第三部分：55AA （ 2字节）
----------
总 共： （512字节）
问题：
1、对于用fdisk /mbr、PE、鬼影专杀等工具，修复损坏的MBR。
是覆盖重写全部512字节？还是只重写第一部分，第二、三部分不动。
2、关于第一部分446字节的引导代码。是不分硬盘、不分厂家、没有版本、全都一样、多年固定不变吗？
DOS命令Fdisk.exe自身含有这446字节的数据吗？否则它怎么能否恢复呢？
难道1983年DOS 2.0版里的Fdisk.exe就有这446字节的数据？与2010年500G硬盘的主引导代码一样？
3、鬼影病毒感染MBR的哪些部分？
电脑被鬼影感染，现已清除。感染时，硬盘的C、D、E、F都可见（资源管理器），文件操作也基本正常。
是否说明第二部分DPT正常，没被病毒改动？是否可以保证DPT是健康干净的？
4、第一部分boot loader 如果都一样，就没有必要备份了。
第二部分DPT，是否很有必要留下备份？
用什么软件留备份好？要简单方便，目前网友使用最多的工具。
5、如果没有留DPT分区表备份。DPT被病毒损坏后，用diskfix、DiskGenius也可以把丢失的分区找出来。
找回来的分区数据安全吗？会不会与原先的DPT数据有微小差别，产生Bug？
能够找回来的成功率有高？找不回来（或只能部分找回来）的严重后果多吗？
两个软件用哪一个好一些？
Last edited by proof on 2010-8-21 at 20:15 ]
Through Baidu Knows: The general MBR is exactly one sector, 512 bytes.
The first part: boot loader (446 bytes)
The second part: DPT ( 64 bytes)
The third part: 55AA ( 2 bytes)
----------
Total: (512 bytes)
Questions:
1. For tools such as fdisk /mbr, PE, Ghost Killing Special, etc., to repair the damaged MBR.
Is it to overwrite and rewrite all 512 bytes? Or only rewrite the first part, and the second and third parts remain unchanged.
2. Regarding the 446-byte boot code in the first part. Are they the same regardless of the hard disk, regardless of the manufacturer, without version, all the same, fixed for many years?
Does the DOS command Fdisk.exe itself contain this 446-byte data? Otherwise, how can it be restored?
Could it be that the Fdisk.exe in DOS 2.0 version in 1983 already had this 446-byte data? The same as the main boot code of a 500G hard disk in 2010?
3. Which parts of the MBR are infected by the Ghost virus?
The computer is infected by Ghost, and it has been cleared now. When infected, the C, D, E, F of the hard disk are all visible (in Explorer), and file operations are basically normal.
Does this indicate that the second part DPT is normal and not modified by the virus? Can it be guaranteed that DPT is healthy and clean?
4. If the first part of the boot loader is all the same, there is no need to back it up.
Is it very necessary to leave a backup for the second part DPT?
What software is good for leaving a backup? It should be simple and convenient, and the most used tool by netizens at present.
5. If there is no backup of the DPT partition table. If the DPT is damaged by the virus, diskfix and DiskGenius can also find the lost partitions.
Are the recovered partition data safe? Will there be minor differences from the original DPT data, causing bugs?
What is the success rate of recovery? What are the serious consequences of not being able to recover (or only partially recover)?
Which of the two software is better?
Last edited by proof on 2010-8-21 at 20:15 ]
|
