Infected drives: low level formatting or Boot and Nuke ?
Results 1 to 10 of 10

Thread: Infected drives: low level formatting or Boot and Nuke ?

  1. #1
    Registered User
    Join Date
    Jun 2009
    Posts
    8

    Question Infected drives: low level formatting or Boot and Nuke ?

    What is the surest way to erase viruses and malwares : low level formatting or Boot and Nuke ?

    I already tried 7 passes on a hard drive and it didn't succeed.

  2. #2
    Registered User Niclo Iste's Avatar
    Join Date
    Oct 2007
    Location
    Pgh, PA
    Posts
    2,051
    What inclines you to think you have an infection?

  3. #3
    Registered User Ferrit's Avatar
    Join Date
    Apr 2001
    Location
    Vancouver Island The Real Canada
    Posts
    4,952
    I am not sure what the problem is but i cannot imagine anything surviving what you have done unless you have another harddrive that s attached that it can hide on.
    What is it exactly that you think survives this Boot anbd Nuke and what makes you think this?

  4. #4
    Registered User
    Join Date
    Jun 2009
    Posts
    8
    I erased only a partition on the drive, and saw the virus comeback.
    This time i would want to erase the whole drive, and would rather use the best method.
    Last edited by john D; June 20th, 2009 at 09:39 AM.

  5. #5
    Registered User Ferrit's Avatar
    Join Date
    Apr 2001
    Location
    Vancouver Island The Real Canada
    Posts
    4,952
    Well the short answer is any low level will kill off anything in the first pass.
    Period.
    I have no idea about boot and nuke.
    I use Wipe,Zap, and sometimes the manufacturers utilities

  6. #6
    Intel Mod Platypus's Avatar
    Join Date
    Jan 2001
    Location
    Australia
    Posts
    5,783
    Either will be satisfactory. A drive manufacturer's zero-fill utility (sometimes called low-level format, although it isn't) or the various ones like DBAN, Zap, Eraser etc will overwrite any virus existing on the drive. The utility must be run from a known virus-free environment, and the drive likewise prepared in a non-infected environment, or directly partition the drive and re-load the OS from non-infectable media ie manufactured CD/DVD.

    What are you meaning when you say 7 "passes" on a hard drive didn't succeed? Is it in reference to the system in this topic:

    http://forums.windrivers.com/showthread.php?t=83455

  7. #7
    Registered User
    Join Date
    Jun 2009
    Posts
    8
    Quote Originally Posted by Platypus View Post

    What are you meaning when you say 7 "passes" on a hard drive didn't succeed? Is it in reference to the system in this topic:

    http://forums.windrivers.com/showthread.php?t=83455
    Yes.
    And it isn't the first time it happened to me while using R'Wipe&Clean 7 passes; i remember reading on some forums there exists malware resisting even low level formatting; what are people's experience here ?

  8. #8
    Registered User
    Join Date
    Feb 2006
    Location
    Canada, Eh!
    Posts
    4,091
    The Canadian Government uses DBan ( http://www.dban.org/ ).

    Don't you wish everyone did?


  9. #9
    Registered User slgrieb's Avatar
    Join Date
    Feb 2003
    Posts
    4,103
    John, there are some bugs that can survive a standard drive format, but not deleting all the partitions on a drive, then reformatting or alternatively, using utilities like DBan or some of the others Platypus mentioned. You have to observe the guidelines he gave you, but that should clean you up just fine.
    Last edited by slgrieb; June 20th, 2009 at 08:45 PM.

  10. #10
    Intel Mod Platypus's Avatar
    Join Date
    Jan 2001
    Location
    Australia
    Posts
    5,783
    Quote Originally Posted by john D View Post
    using R'Wipe&Clean
    R-Wipe&Clean is a utility for secure deletion of traceable data to ensure privacy. As far as I'm aware it won't do anything that would help in dealing with malware.

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •