• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 222
  • Last Modified:

Getting rid of a root kit on RAID Drives

Hello,

Now that many workstations are coming with RAID-1 mirrored hard drives, taking them offline to get rid of rootkits have gotten more complicated. I have a RAID-1 computer that has a particularly awful rootkit. I'm going to rebuild it, but if it was just a single hard drive, I'd take it out, connect it to my own computer and run scans on it that way. What's the comparable practice if you're dealing with RAIDed disks. How do you interact with them without booting into their OSes?
0
jennx
Asked:
jennx
2 Solutions
 
David-HowardCommented:
Boot time scanning may be what you need.
There was a similar question posted here regarding boot time scanning.
http://www.experts-exchange.com/Virus_and_Spyware/Anti-Virus/Q_23626283.html
David
0
 
Sai Prasad KinneraCommented:
If it is a hardware raid then you have your utilities available like NVIDIA which will allow you to remove the partition and then you can configure it as non raid parition and work with it

if it is software then go to recovery console run fixmbr to write a new boot sector, this will create new setup, format will not overwrite this.

hope this helps
0
 
TekServerCommented:
You can also use an imaging utility such as Norton Ghost to clone the RAID partition to a standalone drive, then scan that drive in another computer.

:)
0
Concerto Cloud for Software Providers & ISVs

Can Concerto Cloud Services help you focus on evolving your application offerings, while delivering the best cloud experience to your customers? From DevOps to revenue models and customer support, the answer is yes!

Learn how Concerto can help you.

 
jennxAuthor Commented:
Thanks, David-Howard. I used UBCD4Win and was able to get rid of the infection. I gave points to TekServer too, because I could see doing that as well. But UBCD4Win is awesome.
0
 
TekServerCommented:
> I gave points to TekServer too

Thanks, but unless I missed something, I think you forgot to actually close the question.

:)
0
 
TekServerCommented:
Thanks!  Glad we could help.

;)
0

Featured Post

VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now