LinuxQuestions.org
Share your knowledge at the LQ Wiki.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Non-*NIX Forums > General
User Name
Password
General This forum is for non-technical general discussion which can include both Linux and non-Linux topics. Have fun!

Notices


Reply
  Search this Thread
Old 06-14-2008, 08:09 PM   #16
ErV
Senior Member
 
Registered: Mar 2007
Location: Russia
Distribution: Slackware 12.2
Posts: 1,202
Blog Entries: 3

Rep: Reputation: 62

Quote:
Originally Posted by unSpawn View Post
Here it is about sanitation, as in making certain versus "I thought".

Have disk, erase MBR and PT, run file carver?

Exactly. Saying "will look like" does not equal to making certain.
I absolutely don't understand your reply about "making certain". The OP talks about viruses. Virus is a computer program, which have to be run to make damage. It won't magically restore itself from the remnants old partition or junk data in unused sectors. If you wipe MBR/PartitionTable - there "will be no partitions" on HDD (all data will be still here, but it won't be accessible without special software or recovering MBR/PT). When you'll try installing WinXP(or whatever) after that, new OS will see unformatted space, will ask for repartitioning it, after that it'll write new FS structures, new partition table, etc., wiping all data of locations of former files. So even if there still will be former infected *.exe available on disk at ofset 0xXXXXXXXX, this data won't be accessible, program won't be launched by anything, etc. In worst case virus could install itself in MBR as boot loader (AFAIK, "Format C:" won't fix such problem), which we already handled by Wiping MBR. So, what's the logic in wasting time and filling entire HDD with zeros(or random data) in this case? For me this makes sense only when destroying sensitive data completely (so it won't be recovered by manual data analysis), not when cleaning virus-infected HDD.

--EDIT--
If there is *really* need to exactly fill HDD with zeros, I think it should be possible to do so on any other windows machine (although with Linux LiveCD it will be much easier) by using any HEX-editor software that support direct access to phisycal disk (WinHEX should be able to do that, maybe something else).

Last edited by ErV; 06-14-2008 at 08:16 PM.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Zero Fill for Dummies? UltramaticOrange Linux - General 8 01-11-2008 12:44 PM
Why i must fill DNS ? b:z Linux - Networking 2 03-22-2005 02:07 AM
How to get tvtime to fill my screen biscristi Linux - Software 1 03-06-2005 08:27 AM
Desktop doesn't fill my monitor ??? ChaosJunkee Mandriva 3 06-22-2004 12:08 PM
Anyone wanna fill me in!? whaase Slackware 4 11-04-2003 08:17 PM

LinuxQuestions.org > Forums > Non-*NIX Forums > General

All times are GMT -5. The time now is 12:28 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration