Home > Ask the Security Experts > Platform Security Questions & Answers > The pros and cons of reformatting a hard drive
Ask The Security Expert: Questions & Answers
EMAIL THIS

The pros and cons of reformatting a hard drive

Michael Cobb EXPERT RESPONSE FROM: Michael Cobb

Pose a Question
Other Security Categories
Meet all Security Experts
Become an Expert for this site


Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   


>
QUESTION POSED ON: 18 October 2005
Can a virus still infiltrate a hard drive after it has been completely reformatted?

>
EXPERT RESPONSE
If you choose to reformat a hard drive, you are essentially creating a new, blank indexing scheme, which will make every sector available to write new files. This also makes it appear as though there are no files, directories and data on the drive. However, there is no need to panic, reformatting doesn't actually delete the binary files. While specialist programs can retrieve a lot of the "wiped" files, a virus, or any other program for that matter, is not capable of resurrecting after a disk format.

However, reformatting your hard drive and reinstalling your operating system and programs is very time consuming and it may not solve your problem of being infected by a virus or viruses. Although these viruses will be removed, they can reappear if you have not fixed the security weakness that initially infected your system. Before going the reformatting route, I would run antivirus and antispyware programs that have up-to-date signature files to ensure that your firewall settings are correct. You can also clean your computer by using the viral removal tools available from the Symantec site. I would only reformat and reinstall if you are still suffering from the virus after the checks have been completed. On the other hand, if your drive is part of a system that is used for critical or sensitive work, and it is imperative that it is free from viruses, Trojans and intruder modifications, I would seriously consider reformatting. In this case, merely determining and fixing the vulnerability may not be enough.

If you decide to reformat your hard drive, you will need to backup all your key data, ensure that you have all the original distribution media and any special drivers your system requires. You should physically disconnect the computer from the Internet before reformatting and leave it disconnected until it is fully patched and protected by a firewall. If the computer has a wireless card, remove or shield it so the computer cannot connect to any access points until it is secured. You will also need to reformat and reinstall the operating system, and install all the latest security patches before reconnecting to the Internet. A computer that doesn't have proper patching and firewall protection can be infected within seconds of being connected to the Internet.


More Information
  • Test your knowledge of spam- and virus-fighting techniques with this quiz.
  • Learn proactive strategies for minimizing the threat of spam and viruses to enterprise networks.


  • Sound Off! -   Be the first to post a message to Sound Off!


    Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   


    RELATED CONTENT
    Platform Security
    Is attack code valuable for vulnerabilities or just a publicity stunt?
    Will the features of Windows Vista SP1 encourage wider adoption of the OS?
    Is a Master Boot Record (MBR) rootkit completely invisible to the OS?
    Are open recursive DNS servers inherently insecure?
    Should whole disk encryption products be used with data backup software?
    Which operating system can best secure an FTP site?
    Is desktop virtualization a realistic enterprise option?
    Does FTPS encrypt data packets at the hardware or software level?
    Should disks be encrypted at the hardware level?
    Is Triple DES a more secure encryption scheme than DUKPT?

    Viruses, Worms and Other Malware
    Microsoft Word zero-day being actively exploited
    New defenses for automated SQL injection attacks
    Information security book excerpts and reviews
    Yahoo, McAfee to warn users of dangerous websites
    Botnets and ethics
    Interview: Jim Kirkhope of NCR
    Trojan downloaders, droppers skyrocket, Microsoft says
    New phishing, Zeus Trojan technique spreads crimeware
    Researchers uncover tool used to infect websites, spread malware
    RSA 2008: Defeating botnets

    Enterprise Data Protection
    Growing Mac use prompts call for better security
    Web 2.0 and e-discovery: Risks and countermeasures
    Screencast: Recovering lost data with WinHex
    Countermeasures against targeted attacks in the enterprise
    Websense, Reconnex top Forrester ranking of DLP vendors
    Are open recursive DNS servers inherently insecure?
    Penetration testing: Helping your compliance efforts
    Worst practices: Learning from bad security tips
    The ins and outs of database encryption
    RSA attendees see data classification, rights management projects stumble

    RELATED GLOSSARY TERMS
    Terms from Whatis.com − the technology online dictionary
    bot worm  (SearchSecurity.com)
    directory traversal  (SearchSecurity.com)
    Kraken  (SearchSecurity.com)
    man in the browser  (SearchSecurity.com)
    Mytob  (SearchSecurity.com)
    polymorphic malware  (SearchSecurity.com)
    RavMonE virus  (SearchSecurity.com)
    RFID virus  (SearchSecurity.com)
    Rock Phish  (SearchSecurity.com)
    Zotob  (SearchSecurity.com)

    RELATED RESOURCES
    2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems
    Search Bitpipe.com for the latest white papers and business webcasts
    Whatis.com, the online computer dictionary



    Search and Browse the Expert Answer Center
    Search and browse more than 25,000 question and answer pairs from more than 250 TechTarget industry experts.
    Browse our Expert Advice

    TechTarget Security Media
    Information Security View this month\\'s issue and subscribe today.
    Information Security Decisions Apply online for free conference admission.
    SearchSecurity.com
    HomeNewsMagazineWebcastsWhite PapersLearningAdviceTopicsEventsAbout Us

    About Us  |  Contact Us  |  For Advertisers  |  For Business Partners  |  Site Index  |  RSS
    TechTarget provides enterprise IT professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective IT purchase decisions and managing their organizations' IT projects - with its network of technology-specific Web sites, events and magazines.

    TechTarget Corporate Web Site  |  Media Kits  |  Reprints  |  Site Map




    All Rights Reserved, Copyright 2003 - 2008, TechTarget | Read our Privacy Policy
      TechTarget - The IT Media ROI Experts