Using Linux to create/remove mac partition












0














Rev0



I am trying to remove malware on my computers and in search of the source of persistence*, I have tried different approaches, one being to format the storage device with a mac partition table via Ubuntu. When I generate a new mac partition table, there appears an unknown 31.5kB partition labeled /dev/sda1 but I can't do anything with it. Is this partition normal when implementing a mac partition table on a Linux platform?



*Malware remains after complete low level formatting.



Rev 1 - Added additional information in the screen shot below, provided by GParted.



Gparted-Additional Info. 1



Gparted-Additional Info. 2










share|improve this question




















  • 1




    'low level formatting' .. how did you do that? From Recovery or Internet recovery? Total nuke or just re-initialised the partition? How are you restoring?
    – Tetsujin
    Dec 15 at 9:34










  • I've used programs such as Active Killdisk DBAN and many others to destroy the data on the drive and not restored. After I generate the mac partition table with GParted, the 31,5kB partition shows up with a yellow explanation point next to the partition and the information provided by right clicking and selecting "information" is as listed below. Unable to detect file system! Possible reasons are: - The file system is damaged - The file system is unknown to GParted - There is no file system available (unformatted) - The device entry /dev/sda1 is missing
    – dwmabe2000
    Dec 15 at 18:17












  • I do not know why you resorted to linux to do this. My first question is do you really have malware on your system? Should have run etrecheck and malwarebytes to check out your machine. You can do what you want from a network boot. See idownloadblog.com/2016/02/25/… I format the disk to 2 partitions. I then reformat to one partition.
    – historystamp
    Dec 15 at 21:20










  • I think when you declare a partition of a fixed size, there could be some left over space. It could be that partitions always want to start on some boundary. The unused size could mean the space was left over between two partitions. There are a lot of hidden partitions in mac os.
    – historystamp
    Dec 15 at 21:25












  • I would not recommend partitioning in linux unless you really know what you are doing.
    – historystamp
    Dec 15 at 21:27
















0














Rev0



I am trying to remove malware on my computers and in search of the source of persistence*, I have tried different approaches, one being to format the storage device with a mac partition table via Ubuntu. When I generate a new mac partition table, there appears an unknown 31.5kB partition labeled /dev/sda1 but I can't do anything with it. Is this partition normal when implementing a mac partition table on a Linux platform?



*Malware remains after complete low level formatting.



Rev 1 - Added additional information in the screen shot below, provided by GParted.



Gparted-Additional Info. 1



Gparted-Additional Info. 2










share|improve this question




















  • 1




    'low level formatting' .. how did you do that? From Recovery or Internet recovery? Total nuke or just re-initialised the partition? How are you restoring?
    – Tetsujin
    Dec 15 at 9:34










  • I've used programs such as Active Killdisk DBAN and many others to destroy the data on the drive and not restored. After I generate the mac partition table with GParted, the 31,5kB partition shows up with a yellow explanation point next to the partition and the information provided by right clicking and selecting "information" is as listed below. Unable to detect file system! Possible reasons are: - The file system is damaged - The file system is unknown to GParted - There is no file system available (unformatted) - The device entry /dev/sda1 is missing
    – dwmabe2000
    Dec 15 at 18:17












  • I do not know why you resorted to linux to do this. My first question is do you really have malware on your system? Should have run etrecheck and malwarebytes to check out your machine. You can do what you want from a network boot. See idownloadblog.com/2016/02/25/… I format the disk to 2 partitions. I then reformat to one partition.
    – historystamp
    Dec 15 at 21:20










  • I think when you declare a partition of a fixed size, there could be some left over space. It could be that partitions always want to start on some boundary. The unused size could mean the space was left over between two partitions. There are a lot of hidden partitions in mac os.
    – historystamp
    Dec 15 at 21:25












  • I would not recommend partitioning in linux unless you really know what you are doing.
    – historystamp
    Dec 15 at 21:27














0












0








0







Rev0



I am trying to remove malware on my computers and in search of the source of persistence*, I have tried different approaches, one being to format the storage device with a mac partition table via Ubuntu. When I generate a new mac partition table, there appears an unknown 31.5kB partition labeled /dev/sda1 but I can't do anything with it. Is this partition normal when implementing a mac partition table on a Linux platform?



*Malware remains after complete low level formatting.



Rev 1 - Added additional information in the screen shot below, provided by GParted.



Gparted-Additional Info. 1



Gparted-Additional Info. 2










share|improve this question















Rev0



I am trying to remove malware on my computers and in search of the source of persistence*, I have tried different approaches, one being to format the storage device with a mac partition table via Ubuntu. When I generate a new mac partition table, there appears an unknown 31.5kB partition labeled /dev/sda1 but I can't do anything with it. Is this partition normal when implementing a mac partition table on a Linux platform?



*Malware remains after complete low level formatting.



Rev 1 - Added additional information in the screen shot below, provided by GParted.



Gparted-Additional Info. 1



Gparted-Additional Info. 2







linux mac partitioning






share|improve this question















share|improve this question













share|improve this question




share|improve this question








edited Dec 16 at 3:49

























asked Dec 15 at 1:07









dwmabe2000

115




115








  • 1




    'low level formatting' .. how did you do that? From Recovery or Internet recovery? Total nuke or just re-initialised the partition? How are you restoring?
    – Tetsujin
    Dec 15 at 9:34










  • I've used programs such as Active Killdisk DBAN and many others to destroy the data on the drive and not restored. After I generate the mac partition table with GParted, the 31,5kB partition shows up with a yellow explanation point next to the partition and the information provided by right clicking and selecting "information" is as listed below. Unable to detect file system! Possible reasons are: - The file system is damaged - The file system is unknown to GParted - There is no file system available (unformatted) - The device entry /dev/sda1 is missing
    – dwmabe2000
    Dec 15 at 18:17












  • I do not know why you resorted to linux to do this. My first question is do you really have malware on your system? Should have run etrecheck and malwarebytes to check out your machine. You can do what you want from a network boot. See idownloadblog.com/2016/02/25/… I format the disk to 2 partitions. I then reformat to one partition.
    – historystamp
    Dec 15 at 21:20










  • I think when you declare a partition of a fixed size, there could be some left over space. It could be that partitions always want to start on some boundary. The unused size could mean the space was left over between two partitions. There are a lot of hidden partitions in mac os.
    – historystamp
    Dec 15 at 21:25












  • I would not recommend partitioning in linux unless you really know what you are doing.
    – historystamp
    Dec 15 at 21:27














  • 1




    'low level formatting' .. how did you do that? From Recovery or Internet recovery? Total nuke or just re-initialised the partition? How are you restoring?
    – Tetsujin
    Dec 15 at 9:34










  • I've used programs such as Active Killdisk DBAN and many others to destroy the data on the drive and not restored. After I generate the mac partition table with GParted, the 31,5kB partition shows up with a yellow explanation point next to the partition and the information provided by right clicking and selecting "information" is as listed below. Unable to detect file system! Possible reasons are: - The file system is damaged - The file system is unknown to GParted - There is no file system available (unformatted) - The device entry /dev/sda1 is missing
    – dwmabe2000
    Dec 15 at 18:17












  • I do not know why you resorted to linux to do this. My first question is do you really have malware on your system? Should have run etrecheck and malwarebytes to check out your machine. You can do what you want from a network boot. See idownloadblog.com/2016/02/25/… I format the disk to 2 partitions. I then reformat to one partition.
    – historystamp
    Dec 15 at 21:20










  • I think when you declare a partition of a fixed size, there could be some left over space. It could be that partitions always want to start on some boundary. The unused size could mean the space was left over between two partitions. There are a lot of hidden partitions in mac os.
    – historystamp
    Dec 15 at 21:25












  • I would not recommend partitioning in linux unless you really know what you are doing.
    – historystamp
    Dec 15 at 21:27








1




1




'low level formatting' .. how did you do that? From Recovery or Internet recovery? Total nuke or just re-initialised the partition? How are you restoring?
– Tetsujin
Dec 15 at 9:34




'low level formatting' .. how did you do that? From Recovery or Internet recovery? Total nuke or just re-initialised the partition? How are you restoring?
– Tetsujin
Dec 15 at 9:34












I've used programs such as Active Killdisk DBAN and many others to destroy the data on the drive and not restored. After I generate the mac partition table with GParted, the 31,5kB partition shows up with a yellow explanation point next to the partition and the information provided by right clicking and selecting "information" is as listed below. Unable to detect file system! Possible reasons are: - The file system is damaged - The file system is unknown to GParted - There is no file system available (unformatted) - The device entry /dev/sda1 is missing
– dwmabe2000
Dec 15 at 18:17






I've used programs such as Active Killdisk DBAN and many others to destroy the data on the drive and not restored. After I generate the mac partition table with GParted, the 31,5kB partition shows up with a yellow explanation point next to the partition and the information provided by right clicking and selecting "information" is as listed below. Unable to detect file system! Possible reasons are: - The file system is damaged - The file system is unknown to GParted - There is no file system available (unformatted) - The device entry /dev/sda1 is missing
– dwmabe2000
Dec 15 at 18:17














I do not know why you resorted to linux to do this. My first question is do you really have malware on your system? Should have run etrecheck and malwarebytes to check out your machine. You can do what you want from a network boot. See idownloadblog.com/2016/02/25/… I format the disk to 2 partitions. I then reformat to one partition.
– historystamp
Dec 15 at 21:20




I do not know why you resorted to linux to do this. My first question is do you really have malware on your system? Should have run etrecheck and malwarebytes to check out your machine. You can do what you want from a network boot. See idownloadblog.com/2016/02/25/… I format the disk to 2 partitions. I then reformat to one partition.
– historystamp
Dec 15 at 21:20












I think when you declare a partition of a fixed size, there could be some left over space. It could be that partitions always want to start on some boundary. The unused size could mean the space was left over between two partitions. There are a lot of hidden partitions in mac os.
– historystamp
Dec 15 at 21:25






I think when you declare a partition of a fixed size, there could be some left over space. It could be that partitions always want to start on some boundary. The unused size could mean the space was left over between two partitions. There are a lot of hidden partitions in mac os.
– historystamp
Dec 15 at 21:25














I would not recommend partitioning in linux unless you really know what you are doing.
– historystamp
Dec 15 at 21:27




I would not recommend partitioning in linux unless you really know what you are doing.
– historystamp
Dec 15 at 21:27















active

oldest

votes











Your Answer








StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "3"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);

StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});

function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});


}
});














draft saved

draft discarded


















StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f1383733%2fusing-linux-to-create-remove-mac-partition%23new-answer', 'question_page');
}
);

Post as a guest















Required, but never shown






























active

oldest

votes













active

oldest

votes









active

oldest

votes






active

oldest

votes
















draft saved

draft discarded




















































Thanks for contributing an answer to Super User!


  • Please be sure to answer the question. Provide details and share your research!

But avoid



  • Asking for help, clarification, or responding to other answers.

  • Making statements based on opinion; back them up with references or personal experience.


To learn more, see our tips on writing great answers.





Some of your past answers have not been well-received, and you're in danger of being blocked from answering.


Please pay close attention to the following guidance:


  • Please be sure to answer the question. Provide details and share your research!

But avoid



  • Asking for help, clarification, or responding to other answers.

  • Making statements based on opinion; back them up with references or personal experience.


To learn more, see our tips on writing great answers.




draft saved


draft discarded














StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f1383733%2fusing-linux-to-create-remove-mac-partition%23new-answer', 'question_page');
}
);

Post as a guest















Required, but never shown





















































Required, but never shown














Required, but never shown












Required, but never shown







Required, but never shown

































Required, but never shown














Required, but never shown












Required, but never shown







Required, but never shown







Popular posts from this blog

flock() on closed filehandle LOCK_FILE at /usr/bin/apt-mirror

Mangá

 ⁒  ․,‪⁊‑⁙ ⁖, ⁇‒※‌, †,⁖‗‌⁝    ‾‸⁘,‖⁔⁣,⁂‾
”‑,‥–,‬ ,⁀‹⁋‴⁑ ‒ ,‴⁋”‼ ⁨,‷⁔„ ‰′,‐‚ ‥‡‎“‷⁃⁨⁅⁣,⁔
⁇‘⁔⁡⁏⁌⁡‿‶‏⁨ ⁣⁕⁖⁨⁩⁥‽⁀  ‴‬⁜‟ ⁃‣‧⁕‮ …‍⁨‴ ⁩,⁚⁖‫ ,‵ ⁀,‮⁝‣‣ ⁑  ⁂– ․, ‾‽ ‏⁁“⁗‸ ‾… ‹‡⁌⁎‸‘ ‡⁏⁌‪ ‵⁛ ‎⁨ ―⁦⁤⁄⁕