Using Linux to create/remove mac partition
Rev0
I am trying to remove malware on my computers and in search of the source of persistence*, I have tried different approaches, one being to format the storage device with a mac partition table via Ubuntu. When I generate a new mac partition table, there appears an unknown 31.5kB partition labeled /dev/sda1 but I can't do anything with it. Is this partition normal when implementing a mac partition table on a Linux platform?
*Malware remains after complete low level formatting.
Rev 1 - Added additional information in the screen shot below, provided by GParted.
linux mac partitioning
|
show 2 more comments
Rev0
I am trying to remove malware on my computers and in search of the source of persistence*, I have tried different approaches, one being to format the storage device with a mac partition table via Ubuntu. When I generate a new mac partition table, there appears an unknown 31.5kB partition labeled /dev/sda1 but I can't do anything with it. Is this partition normal when implementing a mac partition table on a Linux platform?
*Malware remains after complete low level formatting.
Rev 1 - Added additional information in the screen shot below, provided by GParted.
linux mac partitioning
1
'low level formatting' .. how did you do that? From Recovery or Internet recovery? Total nuke or just re-initialised the partition? How are you restoring?
– Tetsujin
Dec 15 at 9:34
I've used programs such as Active Killdisk DBAN and many others to destroy the data on the drive and not restored. After I generate the mac partition table with GParted, the 31,5kB partition shows up with a yellow explanation point next to the partition and the information provided by right clicking and selecting "information" is as listed below. Unable to detect file system! Possible reasons are: - The file system is damaged - The file system is unknown to GParted - There is no file system available (unformatted) - The device entry /dev/sda1 is missing
– dwmabe2000
Dec 15 at 18:17
I do not know why you resorted to linux to do this. My first question is do you really have malware on your system? Should have run etrecheck and malwarebytes to check out your machine. You can do what you want from a network boot. See idownloadblog.com/2016/02/25/… I format the disk to 2 partitions. I then reformat to one partition.
– historystamp
Dec 15 at 21:20
I think when you declare a partition of a fixed size, there could be some left over space. It could be that partitions always want to start on some boundary. The unused size could mean the space was left over between two partitions. There are a lot of hidden partitions in mac os.
– historystamp
Dec 15 at 21:25
I would not recommend partitioning in linux unless you really know what you are doing.
– historystamp
Dec 15 at 21:27
|
show 2 more comments
Rev0
I am trying to remove malware on my computers and in search of the source of persistence*, I have tried different approaches, one being to format the storage device with a mac partition table via Ubuntu. When I generate a new mac partition table, there appears an unknown 31.5kB partition labeled /dev/sda1 but I can't do anything with it. Is this partition normal when implementing a mac partition table on a Linux platform?
*Malware remains after complete low level formatting.
Rev 1 - Added additional information in the screen shot below, provided by GParted.
linux mac partitioning
Rev0
I am trying to remove malware on my computers and in search of the source of persistence*, I have tried different approaches, one being to format the storage device with a mac partition table via Ubuntu. When I generate a new mac partition table, there appears an unknown 31.5kB partition labeled /dev/sda1 but I can't do anything with it. Is this partition normal when implementing a mac partition table on a Linux platform?
*Malware remains after complete low level formatting.
Rev 1 - Added additional information in the screen shot below, provided by GParted.
linux mac partitioning
linux mac partitioning
edited Dec 16 at 3:49
asked Dec 15 at 1:07
dwmabe2000
115
115
1
'low level formatting' .. how did you do that? From Recovery or Internet recovery? Total nuke or just re-initialised the partition? How are you restoring?
– Tetsujin
Dec 15 at 9:34
I've used programs such as Active Killdisk DBAN and many others to destroy the data on the drive and not restored. After I generate the mac partition table with GParted, the 31,5kB partition shows up with a yellow explanation point next to the partition and the information provided by right clicking and selecting "information" is as listed below. Unable to detect file system! Possible reasons are: - The file system is damaged - The file system is unknown to GParted - There is no file system available (unformatted) - The device entry /dev/sda1 is missing
– dwmabe2000
Dec 15 at 18:17
I do not know why you resorted to linux to do this. My first question is do you really have malware on your system? Should have run etrecheck and malwarebytes to check out your machine. You can do what you want from a network boot. See idownloadblog.com/2016/02/25/… I format the disk to 2 partitions. I then reformat to one partition.
– historystamp
Dec 15 at 21:20
I think when you declare a partition of a fixed size, there could be some left over space. It could be that partitions always want to start on some boundary. The unused size could mean the space was left over between two partitions. There are a lot of hidden partitions in mac os.
– historystamp
Dec 15 at 21:25
I would not recommend partitioning in linux unless you really know what you are doing.
– historystamp
Dec 15 at 21:27
|
show 2 more comments
1
'low level formatting' .. how did you do that? From Recovery or Internet recovery? Total nuke or just re-initialised the partition? How are you restoring?
– Tetsujin
Dec 15 at 9:34
I've used programs such as Active Killdisk DBAN and many others to destroy the data on the drive and not restored. After I generate the mac partition table with GParted, the 31,5kB partition shows up with a yellow explanation point next to the partition and the information provided by right clicking and selecting "information" is as listed below. Unable to detect file system! Possible reasons are: - The file system is damaged - The file system is unknown to GParted - There is no file system available (unformatted) - The device entry /dev/sda1 is missing
– dwmabe2000
Dec 15 at 18:17
I do not know why you resorted to linux to do this. My first question is do you really have malware on your system? Should have run etrecheck and malwarebytes to check out your machine. You can do what you want from a network boot. See idownloadblog.com/2016/02/25/… I format the disk to 2 partitions. I then reformat to one partition.
– historystamp
Dec 15 at 21:20
I think when you declare a partition of a fixed size, there could be some left over space. It could be that partitions always want to start on some boundary. The unused size could mean the space was left over between two partitions. There are a lot of hidden partitions in mac os.
– historystamp
Dec 15 at 21:25
I would not recommend partitioning in linux unless you really know what you are doing.
– historystamp
Dec 15 at 21:27
1
1
'low level formatting' .. how did you do that? From Recovery or Internet recovery? Total nuke or just re-initialised the partition? How are you restoring?
– Tetsujin
Dec 15 at 9:34
'low level formatting' .. how did you do that? From Recovery or Internet recovery? Total nuke or just re-initialised the partition? How are you restoring?
– Tetsujin
Dec 15 at 9:34
I've used programs such as Active Killdisk DBAN and many others to destroy the data on the drive and not restored. After I generate the mac partition table with GParted, the 31,5kB partition shows up with a yellow explanation point next to the partition and the information provided by right clicking and selecting "information" is as listed below. Unable to detect file system! Possible reasons are: - The file system is damaged - The file system is unknown to GParted - There is no file system available (unformatted) - The device entry /dev/sda1 is missing
– dwmabe2000
Dec 15 at 18:17
I've used programs such as Active Killdisk DBAN and many others to destroy the data on the drive and not restored. After I generate the mac partition table with GParted, the 31,5kB partition shows up with a yellow explanation point next to the partition and the information provided by right clicking and selecting "information" is as listed below. Unable to detect file system! Possible reasons are: - The file system is damaged - The file system is unknown to GParted - There is no file system available (unformatted) - The device entry /dev/sda1 is missing
– dwmabe2000
Dec 15 at 18:17
I do not know why you resorted to linux to do this. My first question is do you really have malware on your system? Should have run etrecheck and malwarebytes to check out your machine. You can do what you want from a network boot. See idownloadblog.com/2016/02/25/… I format the disk to 2 partitions. I then reformat to one partition.
– historystamp
Dec 15 at 21:20
I do not know why you resorted to linux to do this. My first question is do you really have malware on your system? Should have run etrecheck and malwarebytes to check out your machine. You can do what you want from a network boot. See idownloadblog.com/2016/02/25/… I format the disk to 2 partitions. I then reformat to one partition.
– historystamp
Dec 15 at 21:20
I think when you declare a partition of a fixed size, there could be some left over space. It could be that partitions always want to start on some boundary. The unused size could mean the space was left over between two partitions. There are a lot of hidden partitions in mac os.
– historystamp
Dec 15 at 21:25
I think when you declare a partition of a fixed size, there could be some left over space. It could be that partitions always want to start on some boundary. The unused size could mean the space was left over between two partitions. There are a lot of hidden partitions in mac os.
– historystamp
Dec 15 at 21:25
I would not recommend partitioning in linux unless you really know what you are doing.
– historystamp
Dec 15 at 21:27
I would not recommend partitioning in linux unless you really know what you are doing.
– historystamp
Dec 15 at 21:27
|
show 2 more comments
active
oldest
votes
Your Answer
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "3"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f1383733%2fusing-linux-to-create-remove-mac-partition%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
active
oldest
votes
active
oldest
votes
active
oldest
votes
active
oldest
votes
Thanks for contributing an answer to Super User!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Some of your past answers have not been well-received, and you're in danger of being blocked from answering.
Please pay close attention to the following guidance:
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f1383733%2fusing-linux-to-create-remove-mac-partition%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
1
'low level formatting' .. how did you do that? From Recovery or Internet recovery? Total nuke or just re-initialised the partition? How are you restoring?
– Tetsujin
Dec 15 at 9:34
I've used programs such as Active Killdisk DBAN and many others to destroy the data on the drive and not restored. After I generate the mac partition table with GParted, the 31,5kB partition shows up with a yellow explanation point next to the partition and the information provided by right clicking and selecting "information" is as listed below. Unable to detect file system! Possible reasons are: - The file system is damaged - The file system is unknown to GParted - There is no file system available (unformatted) - The device entry /dev/sda1 is missing
– dwmabe2000
Dec 15 at 18:17
I do not know why you resorted to linux to do this. My first question is do you really have malware on your system? Should have run etrecheck and malwarebytes to check out your machine. You can do what you want from a network boot. See idownloadblog.com/2016/02/25/… I format the disk to 2 partitions. I then reformat to one partition.
– historystamp
Dec 15 at 21:20
I think when you declare a partition of a fixed size, there could be some left over space. It could be that partitions always want to start on some boundary. The unused size could mean the space was left over between two partitions. There are a lot of hidden partitions in mac os.
– historystamp
Dec 15 at 21:25
I would not recommend partitioning in linux unless you really know what you are doing.
– historystamp
Dec 15 at 21:27