More DRO

Discussion in 'other security issues & news' started by Rainwalker, Sep 19, 2009.

Thread Status:
Not open for further replies.
  1. Rainwalker

    Rainwalker Registered Member

    Joined:
    May 18, 2003
    Posts:
    2,720
    Location:
    USA
    I was unable to add to the thread I had started awhile back so I'll start another.
    After doing a GMER scan I noted DRO showed up here>> \Device\Harddisk0\
    with a Value of.. Sector 22 and 23 Copy as MBR.
    This low level DRO stuff has not always been on my machine and I am wondering if it might be a root kit. Why would my MBR be copied at all let alone twice ?
    Anyone with similar issue/new thoughts?
     
    Rainwalker, Sep 19, 2009
    #1
  2. Mrkvonic

    Mrkvonic Linux Systems Expert

    Joined:
    May 9, 2005
    Posts:
    10,224
    Did you move your partitions about?
    Do you use imaging/instant recovery/snapshot software?
    Mrk
     
    Mrkvonic, Sep 20, 2009
    #2
  3. Rainwalker

    Rainwalker Registered Member

    Joined:
    May 18, 2003
    Posts:
    2,720
    Location:
    USA
    Thanks for responding Mrkvonic...........no.
     
    Rainwalker, Sep 20, 2009
    #3
  4. Rainwalker

    Rainwalker Registered Member

    Joined:
    May 18, 2003
    Posts:
    2,720
    Location:
    USA
    I want to dump sector 22 & 23 on the MBR via Radix, but Vista is giving me problems with Administrative rights....( Could not open physical memory device!
    Make sure you are running as Administrator ) I thought i was, so it's that full Administrator rights thing again. Would someone remind me how to get to where i need to get to ?
     
    Rainwalker, Sep 21, 2009
    #4
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...