Eric Gisin
Guest
|
 Posted:
Fri Jul 15, 2005 4:16 pm Post subject:
malware can set IDE password in XP SP2 |
|
|
It is well known that DOS malware can do nasty things to your disk,
like setting passwords that render data inaccessable.
I did not know this can also be done under Win 2003 and XP SP2,
using IOCTL_ATA_PASS_THROUGH from administrator accounts.
A recent c't article describes the problem: http://www.heise.de/ct/english/05/08/172/
A partial work-around, enclose non-boot IDE in USB/1394.
Of course, if your regular account has admin privs,
malware under any Windows can wipe all disks. |
|
David J. Craig
Guest
|
| Posted:
Sat Jul 16, 2005 8:16 am Post subject:
Re: malware can set IDE password in XP SP2 |
|
|
Set the ID yourself and then no one else can do it. The hard disk
manufacturer can always undo it and I am sure the data recovery companies
will also know how. Why do you feel the need to spread FUD? Backup and a
little caution should suffice, otherwise you can pay for your mistakes.
"Eric Gisin" <ericgisin@hotmail.com> wrote in message
news:db8kfu064f@enews4.newsguy.com...
| Quote: | It is well known that DOS malware can do nasty things to your disk,
like setting passwords that render data inaccessable.
I did not know this can also be done under Win 2003 and XP SP2,
using IOCTL_ATA_PASS_THROUGH from administrator accounts.
A recent c't article describes the problem:
http://www.heise.de/ct/english/05/08/172/
A partial work-around, enclose non-boot IDE in USB/1394.
Of course, if your regular account has admin privs,
malware under any Windows can wipe all disks.
|
|
|
FAQ
Memberlist
Register
Profile
Log in to check your private messages
Log in