"saskee" <cattj.RemoveThis@sasktel.net> wrote in message news:vh1hn4nib6akaf@corp.supernews.com...
> Yesterday a message popped up on my computer from Norton AV that something
> was messing with my boot disk.
This antiquated feature should be disabled.
> I scanned with AVG which reported the
> presence of one_half, a boot disk virus.
Maybe (pretty likely) a false positive detection.
> When AVG gave no options for
> removal or treatment I searched for info. I downloaded and used the trial
> versions of F-Prot and AVP and they found no virus. I tried the one_half
> specific chk_half.exe and it went into an endless loop accomplishing
> nothing. I backed up my data and booted with a clean Win98 boot disk. I
> fdisk /mbr 'ed and rebooted the system.
This should have now made the system a single boot to Windows
instead of the triple boot mentioned below.
> I scanned with AVG and it still reports a virus, one_half.
It is probably wrong.
> Has anyone experienced similar problems? Which program is right?
>
> My system is a triple boot, RH8, Win2k, Win98 set up. I use the grub
> loader to sort things out on startup.
>
> Any comments, suggestions or ideas appreciated.
I think grub loads the appropriate Windows' loader by making the
chosen Windows partition active and "chain-loading" the loader
from the chosen Windows partition. The grub MBR is not what
these AV programs are expecting to see. Fdisk /mbr should write the
Microsoft standard MBR code back to the boot sector, but maybe
some of the grub code doesn't get overwritten and the AV alerts
on the excess code in the boot sector.
>> Stay informed about: one_half reported by AVG but not AVP or F-Prot?