removing rootkits?
Rootkits, Trojans
can rootkits be on a non-OS disk therefore not be removed even if reload OS? Question
Subscribe to Alerts! Get questions and answers delivered to your Inbox.
Answer Wiki (Improve, edit or add to this answer)
RATE THIS ANSWER
0
Click to Vote:
0
Click to Vote:
- 0
0
Yes, It is entirely possible that a rootkit could be sitting on a NON OS partition and therefore be on the disk after a OS reload. However, remember files themselves are not bad-- executing them or having them running is bad.
Of course, you should try to ensure the rootkits do not exist at all on your system but the simple fact of them being files on the system (after an OS reload) doesn't mean that they are active nessisarily.
Browse more Questions and Answers on Security.
Looking for relevant Security Whitepapers? Visit the SearchSecurity.com Research Library.
Discuss This Answer
You must be logged-in to discuss a question. Log-in/Register
Wrobinson | Mar 30 2008 8:01PM GMT
It is also possible for them to exist in memory, thus it is a good idea to ensure that power is disconnected from the system for at least 10s before reconnecting power is recommended so that anything stored in volatile memory is lost.
