Virus that can survive a reformat ?

Discussion in 'other security issues & news' started by rrrh1, Dec 14, 2007.

Thread Status:
Not open for further replies.
  1. rrrh1

    rrrh1 Registered Member

    Joined:
    Sep 10, 2007
    Posts:
    202
    Virus that can survive a reformat ?

    I remember a discussion on a forum about a proof of concept virus that used either the "host protected area (HPA)" or "device configuration overlay (DCO) area of the hard disk drive to survive a reformat.

    Does anyone here know of such an animal ?

    rrrh1(arch1)

    ;-)
     
  2. rrrh1

    rrrh1 Registered Member

    Joined:
    Sep 10, 2007
    Posts:
    202
    The above from http://en.wikipedia.org/wiki/Host_Protected_Area

    The above from http://www.forensicexams.org/content/view/1510/242/

    The theory was similar to computrace(tm) that when the computer was reconnected to the internet it would reinstall the virus / malware.

    I am still looking foe the origional article...

    rrrh1(arch1)

    :-(
     
Loading...
Thread Status:
Not open for further replies.