Ink Blot welcomes you to Lance's Web Site!I've decided to resurrect my web site on a limited basis; mainly to discuss FAT32X, but also to test a new site build process. LC
(best viewed at 800x600 full screen!)
Boot Sector Scanner
DownloadBOOTSCAN.ZIP or BOOTSCAN.EXE
DescriptionThis program scan a disk for boot sectors. Boot sectors are defined as disk sectors with a boot signature (55h,AAh) in the last two bytes.
C:>bootscan -? BOOTSCAN (01.01, 05/02/98) - Scan Disk for Boot Records usage: BOOTSCAN (DRIVE) [-A] BOOTSCAN (01.01, 05/02/98) BOOTSCAN scans a disk drive for possible boot records. A boot record, which is a sector on the disk, has a signature of 0x55,0xaa in the last two bytes of the record. Typically, boot records are found on the first track of a cylinder (i.e (CYL).0.1) when a partition is a master, or on the next track (i.e. (CYL).1.1) when a partition nested in an extended partition. (DRIVE) specifies the physical disk drive. -B specifies that the disk is to be scanned based on the BIOS geometry. This is the default option. -X specifies that the disk is to be scanned based on the actual geometry. This requires that the int13 extensions are enabled for the drive. -A specifies that all sectors of the disk drive are to be scanned. The default is to only scan the sectors where boot sectors are typically located, i.e. (CYL).0.1 and (CYL).1.1. -D specifies that the boot sectors are to be dumped in hex and ASCII. -F specifies that the boot records are to be extracted and written to files. They will be written to the file(s) BOOT.(NNN) with (NNN) starting at 0 and being incremented by 1 for each boot record. -Z specifies that the running C.H.S values are not to be displayed. Use this option when directing output to a file, i.e. bootscan 0 -a -d -z > boot.0
C:\utillc>bootscan 0 BOOTSCAN (01.01, 05/02/98) - Scan Disk for Boot Records BIOS disk geometry is 786.64.63 Scanning by BIOS geometry. Boot signature found at 0.0.1; sector 0 Boot signature found at 0.1.1; sector 0 Boot signature found at 6.0.1; sector 0 Boot signature found at 6.1.1; sector 0 Boot signature found at 10.0.1; sector 0 Boot signature found at 103.0.1; sector 0 Boot signature found at 103.1.1; sector 0 Boot signature found at 105.0.1; sector 0 Boot signature found at 108.0.1; sector 0 Cyl: 785 Head: 1
FunctionalityParse parameters. Determine disk geometry based on -B or -X options. Set maximum head/sectors to scan based on -A option. Scan disk and report found sectors.
NotesBOOTSCAN can only determine if a sector has a boot signature, it doesn't attempt to identify the type of boot sector, or to determine if it is an active/valid boot sector. If you have repartitioned your disk drive and the original boot sectors have not been overwritten, then those sectors will be found. If you have been using BOOTSECT to extract boot sectors, then those boot sectors will probably be found in the file system area.
The -A option takes considerably longer to run.
When scanning by the -X option, the CHS values reported usually have no connection to the BIOS CHS values. The -X option without the -A option typically will not find current boot sectors past 0.1.1 due to these differences between BIOS and Real disk geometry.
|Lance Costanzo, [email protected]|