Re: Secret Sector Backdoor / Security Breach
- From: Frank Slootweg <this@xxxxxxxxxxxxxxxxx>
- Date: 23 Oct 2007 19:30:52 GMT
Security.Concerned.User@xxxxxxxxx wrote:
Hello everyone,
Recently I've realized that Windows XP Pro (SP1) secretly writes data
to hard-disk sector(s) that were beyond its
installation-partition boundaries; at that time I used a
basic Windows XP installation on a 3-GB partition,
and the rest of the harddisk was unformatted, for all Windows cared.
Was the XP partition the *first* partition (C:)? If not, then there's
your answer, because XP needs stuff on C: to boot.
Is your XP software a *retail* version (i.e. a box which you bought in
a store), or an 'OEM' version which came with your/a computer? If the
latter, than it may contain extra software which is stored in a hidden
partition. For example my HP OmniBook vt6200 has a hidden partition with
diagnostic programs.
As xpyttl mentioned, it may well be a hibernate partition. XP normally
uses a hibernate file, but IIRC it can still use a hibernate partition
(like Windows 2000).
BTW. *how* did you determine that XP/something writes beyond the
partition? You mentioned the *tool* you used ("an MSDOS-run Disk
Editor"), but not what the tool *showed*, let alone what made you look
in the first place.
[...]
.
- References:
- Secret Sector Backdoor / Security Breach
- From: Security . Concerned . User
- Secret Sector Backdoor / Security Breach
- Prev by Date: Re: Secret Sector Backdoor / Security Breach
- Next by Date: Re: A tool for mirroring HTTP stream
- Previous by thread: Re: Secret Sector Backdoor / Security Breach
- Next by thread: A tool for mirroring HTTP stream
- Index(es):
Relevant Pages
|
|
