TDL4 Rootkit and Imaging Apps

Discussion in 'backup, imaging & disk mgmt' started by aigle, Mar 27, 2013.

Thread Status:
Not open for further replies.
Page 2 of 2
  1. Brian K

    Brian K Imaging Specialist

    Joined:
    Jan 28, 2005
    Posts:
    12,175
    Location:
    NSW, Australia
    That's my understanding too.
     
    Brian K, Mar 27, 2013
    #26
  2. 1000db

    1000db Registered Member

    Joined:
    Jan 9, 2009
    Posts:
    718
    Location:
    Missouri
    Good explanation. So its a case of diminishing returns; easy to do but the time it takes to restore unused space simply to rid the system of benign traces makes the operation not worth it. Thanks.
     
    1000db, Mar 27, 2013
    #27
  3. Robin A.

    Robin A. Registered Member

    Joined:
    Feb 25, 2006
    Posts:
    2,557
    I don´t think so. The MBR is not always restored. It depends on the imaging app and on the options selected when creating and restoring the image. The MBR can be optionally rebuilt, which is different.

    There is a related discussion in
    https://www.wilderssecurity.com/showthread.php?t=341703.
     
    Robin A., Mar 27, 2013
    #28
  4. Isso

    Isso Developer

    Joined:
    Mar 28, 2009
    Posts:
    1,450
    My bad, what I was trying to say is that pretty much any imaging program is able to restore MBR (in contrast to restoring unused disk space).

    Isso
     
    Isso, Mar 27, 2013
    #29
  5. Peter2150

    Peter2150 Global Moderator

    Joined:
    Sep 20, 2003
    Posts:
    20,590
    I can restore unused disk space if I imaged to capture every sector. Two big issues with that. 1)image size is almost the same as the drive, and 2) time. I've never done it.

    Pete
     
    Peter2150, Mar 28, 2013
    #30
Page 2 of 2
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...