site Search:


 
    All Forums Hot Topics Gallery






how-to block ads


 
Search Topic:
Share Topic
Posting?
Post a:
Post a:
Links: ·Hijack This logs? ·Panda Free Tools ·Vundo Removal
AuthorAll Replies


ashrc4
Premium
join:2009-02-06
australia

2 edits

reply to SweetNoob

Re: Possible for malware to covertly hide on harddrive sector

said by SweetNoob :

I know about hardware malware being specifically designed for certain manufactures..

Had a hardware supplier (motherboard or Hdd...forget) allow for a hidden partition for it's own recovery. It was not searchable on the OS and not formattable by standard methods. Combined with a simple MBR exploit i would have to guess whether any malware has been written to exploit it. The malware in a hidden partition may not be scanned by AV.
Checking for these partitions can usually be assumed by comparing harddrive space from actual Hdd size.
I have a non-OEM install for a non-laptop Hdd so using D-Ban or equivalent should suffice in wiping the total drive space that these could hide.



O.k. forget d-ban for this job.


Cartel

join:2006-09-13
Chilliwack, BC
kudos:2
Reviews:
·TekSavvy DSL
·Shaw
·TELUS

said by ashrc4:

said by SweetNoob :

I know about hardware malware being specifically designed for certain manufactures..

Had a hardware supplier (motherboard or Hdd...forget) allow for a hidden partition for it's own recovery. It was not searchable on the OS and not formattable by standard methods. Combined with a simple MBR exploit i would have to guess whether any malware has been written to exploit it. The malware in a hidden partition may not be scanned by AV.
Checking for these partitions can usually be assumed by comparing harddrive space from actual Hdd size.
I have a non-OEM install for a non-laptop Hdd so using D-Ban or equivalent should suffice in wiping the total drive space that these could hide.
[att=1]

O.k. forget d-ban for this job.

Could that be dangerous for the drive?
I think some damaged sectors are remapped for a reason and sectors are reserved to replace damaged ones.

Wednesday, 19-Jun 01:08:42 Terms of Use & Privacy | feedback | contact | Hosting by nac.net - DSL,Hosting & Co-lo
over 13.5 years online © 1999-2013 dslreports.com.
Most commented news this week
Hot Topics