Cleaning a virus laden hard drive - format vs diskpart/clean

[Vincenzo]

I'd like to make sure all malware is off an old hard drive before I re-use it. I want to make sure that all areas, including the boot sector are clean. Will using "format" in disk manager do that, or is Diskpart/Clean a more thorough cleaning?

Thanks

 

[seavixen32]

If you want a thorough format you can use the Clean All command, but be aware it will take several hours or so depending on the size of your hard drive.

Gregrocker is of the opinion that the Clean command is enough and knowing how knowledgeable he is I'd say that's good enough.

http://www.sevenforums.com/tutorials/52129-disk-clean-clean-all-diskpart-command.html

 

[Corazon]

Definitely use the Diskpart method. Just formatting all existing partitions won't touch the MBR or any code stored in the first 63 sectors of the disk.

Diskpart's clean command wipes out the MBR and partition table completely, so for all intents and purposes the disk is returned to a virgin state. Everything else that still remains on it simply becomes inert, random data.

 

[ICIT2LOL]

How about a factory default - if it is a "bought" machine. It will clean everything and leave your OS intact.

Trouble is you have to clean the bloat and do all the updating again.

Menat to ad what do the others think of a an already cloned "clean' drive (I keep a couple spare) and just clone the the main drive from it? Or perhaps CCleaner drive wipe but you need the install disk eh?

 

[Vincenzo]

Thanks Seavixen and Corazon. I used the Clean function and it worked very nicely. I was pleased to see that when it was done it had removed all the partitions and left the space unallocated.

 

[Vincenzo]

How about a factory default?

This is a bare drive, no computer.

Thanks

 

[Golden]

Hi Vincenzo,

Can I offer a suggestion? Once you have your recently cleaned disk installed with everything you need, consider imaging your sytem using FREE Macrium Reflect - this way, if you run into trouble again, you could simple reinstall your entire system from the Macrium image. Its far quicker than doing a fresh install of everything.

This tutorial will be useful too :

http://www.sevenforums.com/tutorials/73828-imaging-free-macrium.html

Regards,
Golden

 

[seavixen32]

Thanks Seavixen and Corazon. I used the Clean function and it worked very nicely. I was pleased to see that when it was done it had removed all the partitions and left the space unallocated.

You're very welcome.

Thanks for the feedback.

 

[Vincenzo]

Hi Vincenzo,

Can I offer a suggestion? Once you have your recently cleaned disk installed with everything you need, consider imaging your sytem using FREE Macrium Reflect - this way, if you run into trouble again, you could simple reinstall your entire system from the Macrium image. Its far quicker than doing a fresh install of everything.

This tutorial will be useful too :

http://www.sevenforums.com/tutorials/73828-imaging-free-macrium.html

Regards,
Golden

Thanks Golden. Yes, I agree. I am a big fan of imaging. I use Ghost and Acronis. This drive was given to me by a friend.

 

[Corazon]

Very welcome, thanks for letting us know you succeeded. I agree with Golden as well, nothing says "fresh start" like a pristine image of a newly-installed OS with all updates, drivers and core apps already installed.

 

[ICIT2LOL]

How about a factory default?

This is a bare drive, no computer.

Thanks

Sorry mate misunderstood the problem but I have cloned using EaseUS to do with old drives as slaves to clear them

 

[killjoy]

Mcafee released a white paper saying that there is no way a user can know if their system has been cleaned without reinstalling. A reformat should be fine unless you want to wipe the drive too, which isn't necessary for virus removal. Wiping is usually used for security (information).

They recommended reinstalling or restoring a backup for a compromised system. IBM workers are advised to reinstall every two years regardless of whether they are experiencing noticeable problems or not.