[LIB] killmbr=killmb?
Date: Sat, 11 May 2002 17:03:53 EDT From: [EMAIL PROTECTED] Subject: killmbr=killmb? The Libretto 100CT Recovery/Backup boot diskette which comes with the Lib has a file in the BIN subdirectory labeled killmb.com. After copying this floppy to a directory on my desktop HDD for safekeeping, then running NAV, Norton reports this file as the virus KillMBR.g and suggests quarantine or deletion. Norton then blocked my attempt at copying this file from the floppy to the HDD, again identifying it as the killmbr.g virus. I am assuming this is a mistake of NAV; can anyone confirm from their copy of the Lib boot diskette that a file called A:\BIN\killmb.com exists? There is also a file called killhd in the same directory - anyone know what these do, if they're not virii? Thanks. Lee ** http://libretto.basiclink.com - Libretto mailing list http://www.silverace.com/libretto/ - Archives ---TO UNSUBSCRIBE--- Reply to any of the list messages. The reply mail should be addressed to: [EMAIL PROTECTED] - Then replace any text on the message's subject line: cmd:unsubscribe TO UNSUBSCRIBE DIGEST-- Do above but with this on subject line: cmd:unsubscribe digest **
Re: [LIB] killmbr=killmb?
Date: Mon, 13 May 2002 09:57:33 +0200 From: Christian Gennerat <[EMAIL PROTECTED]> Subject: Re: [LIB] killmbr=killmb? [EMAIL PROTECTED] a écrit : > Date: Sat, 11 May 2002 17:03:53 EDT > From: [EMAIL PROTECTED] > Subject: killmbr=killmb? > > The Libretto 100CT Recovery/Backup boot diskette which comes with the Lib has > a file in the BIN subdirectory labeled killmb.com. After copying this floppy > to a directory on my desktop HDD for safekeeping, then running NAV, Norton > reports this file as the virus KillMBR.g and suggests quarantine or deletion. > Norton then blocked my attempt at copying this file from the floppy to the > HDD, again identifying it as the killmbr.g virus. > > I am assuming this is a mistake of NAV; can anyone confirm from their copy of > the Lib boot diskette that a file called A:\BIN\killmb.com exists? There is > also a file called killhd in the same directory - anyone know what these do, > if they're not virii? Thanks. > Not a mistake. The MBR is a vital part of your system. All anti-virus search for programs that could make a damage in the MBR. The name of this one is quite explicit ! ** http://libretto.basiclink.com - Libretto mailing list http://www.silverace.com/libretto/ - Archives ---TO UNSUBSCRIBE--- Reply to any of the list messages. The reply mail should be addressed to: [EMAIL PROTECTED] - Then replace any text on the message's subject line: cmd:unsubscribe TO UNSUBSCRIBE DIGEST-- Do above but with this on subject line: cmd:unsubscribe digest **
RE: [LIB] killmbr=killmb?
Date: Mon, 13 May 2002 08:39:42 -0400 From: "Steve Schone" <[EMAIL PROTECTED]> Subject: RE: [LIB] killmbr=killmb? Lee, Both the killmb.com and killhd.com are programs used by the Libretto 100CT Configuration Builder CD, and for that matter most the Configuration Builder CDS for most other models of Toshiba notebook. A number of virus programs will falsely identify them as virus(s), but they are not. They are used to prep the system/hard drive before re-installing the factory configuration from the CD. Steve Schone President Micro Solutions, Inc 72 North Street, Suite 101 Danbury, CT 06810 e-mail: [EMAIL PROTECTED] Web Site: www.micsol.com phone : 203-748-4633 fax : 203-797-9849 Micro Solutions is the pre-eminent Toshiba computer distributor and service company. "We pride ourselves on being the best." -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Saturday, May 11, 2002 5:05 PM To: Libretto Subject: [LIB] killmbr=killmb? Date: Sat, 11 May 2002 17:03:53 EDT From: [EMAIL PROTECTED] Subject: killmbr=killmb? The Libretto 100CT Recovery/Backup boot diskette which comes with the Lib has a file in the BIN subdirectory labeled killmb.com. After copying this floppy to a directory on my desktop HDD for safekeeping, then running NAV, Norton reports this file as the virus KillMBR.g and suggests quarantine or deletion. Norton then blocked my attempt at copying this file from the floppy to the HDD, again identifying it as the killmbr.g virus. I am assuming this is a mistake of NAV; can anyone confirm from their copy of the Lib boot diskette that a file called A:\BIN\killmb.com exists? There is also a file called killhd in the same directory - anyone know what these do, if they're not virii? Thanks. Lee ** http://libretto.basiclink.com - Libretto mailing list http://www.silverace.com/libretto/ - Archives ---TO UNSUBSCRIBE--- Reply to any of the list messages. The reply mail should be addressed to: [EMAIL PROTECTED] - Then replace any text on the message's subject line: cmd:unsubscribe TO UNSUBSCRIBE DIGEST-- Do above but with this on subject line: cmd:unsubscribe digest ** ** http://libretto.basiclink.com - Libretto mailing list http://www.silverace.com/libretto/ - Archives ---TO UNSUBSCRIBE--- Reply to any of the list messages. The reply mail should be addressed to: [EMAIL PROTECTED] - Then replace any text on the message's subject line: cmd:unsubscribe TO UNSUBSCRIBE DIGEST-- Do above but with this on subject line: cmd:unsubscribe digest **
Re: [LIB] killmbr=killmb?
Date: Mon, 13 May 2002 08:48:29 EDT From: [EMAIL PROTECTED] Subject: Re: [LIB] killmbr=killmb? In a message dated 5/13/02 6:45:51 AM Mountain Daylight Time, [EMAIL PROTECTED] writes: > Lee, > > Both the killmb.com and killhd.com are programs used by the Libretto 100CT > Configuration Builder CD, and for that matter most the Configuration Builder > CDS for most other models of Toshiba notebook. A number of virus programs > will falsely identify them as virus(s), but they are not. They are used to > prep the system/hard drive before re-installing the factory configuration > from the CD. > > Steve Schone > > President > Micro Solutions, Inc > 72 North Street, Suite 101 > Danbury, CT 06810 Thanks, Steve! ** http://libretto.basiclink.com - Libretto mailing list http://www.silverace.com/libretto/ - Archives ---TO UNSUBSCRIBE--- Reply to any of the list messages. The reply mail should be addressed to: [EMAIL PROTECTED] - Then replace any text on the message's subject line: cmd:unsubscribe TO UNSUBSCRIBE DIGEST-- Do above but with this on subject line: cmd:unsubscribe digest **
Re: [LIB] killmbr=killmb?
Date: Mon, 13 May 2002 08:46:15 EDT From: [EMAIL PROTECTED] Subject: Re: [LIB] killmbr=killmb? In a message dated 5/13/02 2:18:50 AM Mountain Daylight Time, [EMAIL PROTECTED] writes: > > The Libretto 100CT Recovery/Backup boot diskette which comes with the Lib > has > > a file in the BIN subdirectory labeled killmb.com. After copying this > floppy > > to a directory on my desktop HDD for safekeeping, then running NAV, Norton > > reports this file as the virus KillMBR.g and suggests quarantine or > deletion. > > Norton then blocked my attempt at copying this file from the floppy to > the > > HDD, again identifying it as the killmbr.g virus. > > > > I am assuming this is a mistake of NAV; can anyone confirm from their copy > of > > the Lib boot diskette that a file called A:\BIN\killmb.com exists? There > is > > also a file called killhd in the same directory - anyone know what these > do, > > if they're not virii? Thanks. > > > > Not a mistake. > The MBR is a vital part of your system. All anti-virus search for programs > that could make a damage in the MBR. > The name of this one is quite explicit ! Yes, NAV is clearly keying on this file's name/function and it's similarity to the killmbr.g virus, and reporting it as a virus. And I agree, identifying master boot record-altering programs is/should be a function of anti-virus software. But, is this particular file part of the Lib boot disk's utilities, or is it in fact the killmbg.g virus (or a component thereof?) Does anyone have this original Libretto Backup/Recovery boot floppy to check for me? Thanks. Lee ** http://libretto.basiclink.com - Libretto mailing list http://www.silverace.com/libretto/ - Archives ---TO UNSUBSCRIBE--- Reply to any of the list messages. The reply mail should be addressed to: [EMAIL PROTECTED] - Then replace any text on the message's subject line: cmd:unsubscribe TO UNSUBSCRIBE DIGEST-- Do above but with this on subject line: cmd:unsubscribe digest **
