More DRO

Discussion in 'other security issues & news' started by Rainwalker, Sep 19, 2009.

Thread Status:
Not open for further replies.
  1. Rainwalker

    Rainwalker Registered Member

    Joined:
    May 18, 2003
    Posts:
    2,106
    Location:
    USA
    I was unable to add to the thread I had started awhile back so I'll start another.
    After doing a GMER scan I noted DRO showed up here>> \Device\Harddisk0\
    with a Value of.. Sector 22 and 23 Copy as MBR.
    This low level DRO stuff has not always been on my machine and I am wondering if it might be a root kit. Why would my MBR be copied at all let alone twice ?
    Anyone with similar issue/new thoughts?
     
  2. Mrkvonic

    Mrkvonic Linux Systems Expert

    Joined:
    May 9, 2005
    Posts:
    8,700
    Did you move your partitions about?
    Do you use imaging/instant recovery/snapshot software?
    Mrk
     
  3. Rainwalker

    Rainwalker Registered Member

    Joined:
    May 18, 2003
    Posts:
    2,106
    Location:
    USA
    Thanks for responding Mrkvonic...........no.
     
  4. Rainwalker

    Rainwalker Registered Member

    Joined:
    May 18, 2003
    Posts:
    2,106
    Location:
    USA
    I want to dump sector 22 & 23 on the MBR via Radix, but Vista is giving me problems with Administrative rights....( Could not open physical memory device!
    Make sure you are running as Administrator ) I thought i was, so it's that full Administrator rights thing again. Would someone remind me how to get to where i need to get to ?
     
Loading...
Thread Status:
Not open for further replies.