cleaning a SATA drive

  • Thread starter Thread starter Soccer Dad
  • Start date Start date
S

Soccer Dad

I suppose this could be a general post about any HD, but the drive in
question is a SATA.

We had a SATA installed on a computer that may have been infected with
a virus, and in order to use it again, we need wipe the drive clean.

Do WD drives come with diagnostic programs that will do a low level
format? Once the drive is formatted, how can we install an OS?
 
I suppose this could be a general post about any HD, but the drive in
question is a SATA.

We had a SATA installed on a computer that may have been infected with
a virus, and in order to use it again, we need wipe the drive clean.

Do WD drives come with diagnostic programs that will do a low level
format? Once the drive is formatted, how can we install an OS?
Click to expand...

IN Linux do

dd if=/dev/zero bs=1M of=/dev/sdX

you can use any of the linux live-CD distros. Writing zeroes to the
entire surface clears the HDD and is the modern equivalent to a low
level format.

Grant.
 
Soccer Dad said:
I suppose this could be a general post about any HD, but the drive in
question is a SATA.
Click to expand...
We had a SATA installed on a computer that may have been infected with
a virus, and in order to use it again, we need wipe the drive clean.
Click to expand...
Do WD drives come with diagnostic programs that will do a low level
format? Once the drive is formatted, how can we install an OS?
Click to expand...

You cannot low-level format modern disks. What you do instead
is a complete overwrite with zeros.

Get a Knoppix 5.1.1 CD, boot from it and go to the console (Alt-F1).
Then use 'dd_rescue' to overwrite the drive:

dd_rescue -w /dev/zero /dev/sda

If your drive is not sda, replace by the device name of the
drive. To list all drives and partitions use

fdisk -l

'dd_rescue' is better than 'dd', because it is a forensics and
recovery tool. It guives a nice progess indicator and it
will overwrite (or read) disks with errors.

For the OS installation, you need an installation medium.
For Linux/Windows/FreeBSD/... this is typically a bootable
CD or DVD. Boot from it after having zeroed the disk and
follow the instructions.

Arno
 
Soccer said:
I suppose this could be a general post about any HD, but the drive in
question is a SATA.

We had a SATA installed on a computer that may have been infected with
a virus, and in order to use it again, we need wipe the drive clean.

Do WD drives come with diagnostic programs that will do a low level
format? Once the drive is formatted, how can we install an OS?
Click to expand...

Soccer Dad:

Try "Copy-Wipe". A good utility to have in any case.

http://www.terabyteunlimited.com/copywipe.php

HTH & GL

John

--
\\\||///
------------------o000----(o)(o)----000o----------------
----------------------------()--------------------------
'' Madness takes its toll - Please have exact change. ''

John Dulak - 40.4913ºN,79.904ºW - http://tinyurl.com/2qs6o6
 
Soccer said:
I suppose this could be a general post about
any HD, but the drive in question is a SATA.
Click to expand...
We had a SATA installed on a computer that may have been infected
with a virus, and in order to use it again, we need wipe the drive clean.
Click to expand...
Do WD drives come with diagnostic programs that will do a low level format?
Click to expand...

You cant do a low level format on modern drives.

Its trivial to do an OS level format.
Once the drive is formatted, how can we install an OS?
Click to expand...

Depends on the OS. XP and Vista and Windows 7 will all
do a format of the physical drive when you boot from the
distribution CD, in the very first phase of a clean install.

Its similar with Win9x and Linux although a little more manual.
 
We had a SATA installed on a computer that may have been infected with
a virus, and in order to use it again, we need wipe the drive clean.
Click to expand...


You want DBAN, Dan's burn & nuke.....
 
Soccer Dad wrote...
I suppose this could be a general post about any HD, but the drive in
question is a SATA.

We had a SATA installed on a computer that may have been infected with
a virus, and in order to use it again, we need wipe the drive clean.

Do WD drives come with diagnostic programs that will do a low level
format? Once the drive is formatted, how can we install an OS?
Click to expand...

Wiping is easy. But re-install the OS (assume XP) may be difficult,
if you do not have the correct drivers.
Also, XP may not have the correct driver for your SATA HDD.

Here is what I would do.
1. Run Driver Magician to extract the drivers on the existing
OS. Save the drivers to somewhere.
2. If you don't trust the drivers from an infected OS,
fetch copies of drivers from the manufacturer web sites.
3. slipstream XP CD with the SATA HDD driver, using nLite.
Boot test your XP CD as to confirm it can see your SATA HDD.
4. wipe the HDD. Many people have had good suggestions already.
I prefer using Partition Magic, or Acronis Disk Director.
5. Boot up XP slipstream CD that can recognize your SATA HDD.
And install XP to the HDD.
 
Harry331 wrote
Soccer Dad wrote
Click to expand...
Wiping is easy. But re-install the OS (assume XP)
may be difficult, if you do not have the correct drivers.
Nope.

Also, XP may not have the correct driver for your SATA HDD.
Click to expand...

Slipstreamed SP2 or SP3 will be fine.
Here is what I would do.
1. Run Driver Magician to extract the drivers on the existing
OS. Save the drivers to somewhere.
2. If you don't trust the drivers from an infected OS,
fetch copies of drivers from the manufacturer web sites.
3. slipstream XP CD with the SATA HDD driver, using nLite.
Click to expand...

Makes a lot more sense to slipsteam SP2 or SP3.
Boot test your XP CD as to confirm it can see your SATA HDD.
Click to expand...

He wont be able to install it if it cant, no need to test anything.
4. wipe the HDD. Many people have had good suggestions already.
I prefer using Partition Magic, or Acronis Disk Director.
Click to expand...

The XP install CD will format the partition fine.
5. Boot up XP slipstream CD that can recognize your SATA HDD.
And install XP to the HDD.
Click to expand...

Might as well use it to do the formatting.
 
Harry331 said:
Soccer Dad wrote...
Click to expand...
Wiping is easy. But re-install the OS (assume XP) may be difficult,
if you do not have the correct drivers.
Also, XP may not have the correct driver for your SATA HDD.
Click to expand...

Actually that would be the driver for the SATA controller, the
HDD does not need a driver. Best either donwload that and burn
it to CD before reinstallig or find the original driver CD.

If your controller runs in ATA/IDE mode (typically a BIOS setting),
you can do without the driver for the initial install and
add it later (for performance reasons).
Here is what I would do.
1. Run Driver Magician to extract the drivers on the existing
OS. Save the drivers to somewhere.
Click to expand...

Hm. Risky with an infected PC.
2. If you don't trust the drivers from an infected OS,
fetch copies of drivers from the manufacturer web sites.
Click to expand...

Do that.
3. slipstream XP CD with the SATA HDD driver, using nLite.
Boot test your XP CD as to confirm it can see your SATA HDD.
Click to expand...

Alternatively, just burn the driver files (unpacked) to CD and
insert the CD when asked for 3rd party drivers.
4. wipe the HDD. Many people have had good suggestions already.
I prefer using Partition Magic, or Acronis Disk Director.
5. Boot up XP slipstream CD that can recognize your SATA HDD.
And install XP to the HDD.
Click to expand...

There is a second driver you will want to have ready, namely
the network card driver. If you have HDD and network, you can
get everything else later from the net. Without one or the other,
you need a separate PC or are stuck.

Of course, with a modern Linux distribution, none of this driver
juggeling is necessary. With Windows 7 it should not be either,
but OS integrated driver support is still significantly behind.

Arno
 
Soccer said:
I suppose this could be a general post about any HD, but the drive in
question is a SATA.

We had a SATA installed on a computer that may have been infected with
a virus, and in order to use it again, we need wipe the drive clean.
Click to expand...

As others have pointed out, if you want to totally remove all traces of
data on the drive, then any number of methods and utilities will be able
to write zeros to your drive to wipe it out. However, for a virus
infection that's not necessary, a simple repartitioning and reformat is
enough. You'd have to boot into your original Windows install CDs and
reinstall the OS, and that should be enough.

Viruses cannot survive past a high-level reformat, let alone a full disk
repartitioning.
Do WD drives come with diagnostic programs that will do a low level
format? Once the drive is formatted, how can we install an OS?
Click to expand...

You'll need your original Windows XP (or whichever Windows) install CDs
or DVDs.

Yousuf Khan
 
Alternatively, just burn the driver files (unpacked) to CD and
insert the CD when asked for 3rd party drivers.
Click to expand...

Correct me if I am wrong.

Isn't that XP Install CD asks only for inserting floppy with drivers?
I meant there is no U.I. for user to invert a driver CD
during XP installation. And for nowsaday's PC's with SATA HDD,
there is little chance you can find one with a floppy drive.
No to metion one with two CD/DVD drives; one for XP install
CD, and the second for driver CD.

That's the point for slipstreaming SATA controller drivers to the
XP install CD's. And yes, as you have corrected me; it is
drivers for SATA controllers, not drivers for SATA HDD.
 
Correct me if I am wrong.
Click to expand...
Isn't that XP Install CD asks only for inserting floppy with drivers?
I meant there is no U.I. for user to invert a driver CD
during XP installation. And for nowsaday's PC's with SATA HDD,
there is little chance you can find one with a floppy drive.
No to metion one with two CD/DVD drives; one for XP install
CD, and the second for driver CD.
Click to expand...

Possible. I have not installed XP for ages. I have been able to
get it through several hardware changes now.

Interestingly, there is a really stupid bug in Win 7 at this point: It
does not prompt you to re-instert the Win 7 DVD after driver
installation and gives you a cryptic hex error code instead. Just like
this part of the installer was never really tested. I ran into this
last weekend.
That's the point for slipstreaming SATA controller drivers to the
XP install CD's. And yes, as you have corrected me; it is
drivers for SATA controllers, not drivers for SATA HDD.
Click to expand...

Well, I think XP can read drivers from CD by using the
"specify location" functionality, even if it talks about
wanting a floppy disk. But I am by no means sure and I will
not go through the pain of installing it to find out ;-)

If it works, however, you will be able to swotch CDs in
one drive.

Come to think of it, with a modern BIOS, may an USB key in
superfloppy format work?

Arno
 
As others have pointed out, if you want to totally remove all traces of
data on the drive, then any number of methods and utilities will be able
to write zeros to your drive to wipe it out. However, for a virus
infection that's not necessary, a simple repartitioning and reformat is
enough. You'd have to boot into your original Windows install CDs and
reinstall the OS, and that should be enough.
Click to expand...
Viruses cannot survive past a high-level reformat, let alone a full disk
repartitioning.
Click to expand...

I wish this was still true. There are several virulent boot sector viruses
out there now.
 
I wish this was still true. There are several virulent boot sector viruses
out there now.
Click to expand...

And the Host Protected Area -- though gigabyte have broken some
installs with their silly new idea of backing up the BIOS in an
HPA.

Grant.
 
David said:
I wish this was still true. There are several virulent boot sector viruses
out there now.
Click to expand...

Fixmbr should take care of that also. When you install Windows and it
asks you if you want to reformat and repartition a drive completely from
scratch, that should also reset the MBR.

Yousuf Khan
 
Back
Top