More DRO

Discussion in 'other security issues & news' started by Rainwalker, Sep 19, 2009.

Thread Status:
Not open for further replies.
  1. Rainwalker

    Rainwalker Registered Member

    Joined:
    May 18, 2003
    Posts:
    2,363
    Location:
    USA
    I was unable to add to the thread I had started awhile back so I'll start another.
    After doing a GMER scan I noted DRO showed up here>> \Device\Harddisk0\
    with a Value of.. Sector 22 and 23 Copy as MBR.
    This low level DRO stuff has not always been on my machine and I am wondering if it might be a root kit. Why would my MBR be copied at all let alone twice ?
    Anyone with similar issue/new thoughts?
     
  2. Mrkvonic

    Mrkvonic Linux Systems Expert

    Joined:
    May 9, 2005
    Posts:
    9,368
    Did you move your partitions about?
    Do you use imaging/instant recovery/snapshot software?
    Mrk
     
  3. Rainwalker

    Rainwalker Registered Member

    Joined:
    May 18, 2003
    Posts:
    2,363
    Location:
    USA
    Thanks for responding Mrkvonic...........no.
     
  4. Rainwalker

    Rainwalker Registered Member

    Joined:
    May 18, 2003
    Posts:
    2,363
    Location:
    USA
    I want to dump sector 22 & 23 on the MBR via Radix, but Vista is giving me problems with Administrative rights....( Could not open physical memory device!
    Make sure you are running as Administrator ) I thought i was, so it's that full Administrator rights thing again. Would someone remind me how to get to where i need to get to ?
     
Loading...
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.