Re: Qusetion about EWF protect ability
From: KM (konstmor_at_nospam.yahoo.com)
Date: 04/22/04
- Next message: KM: "Re: freezing up even when idle"
- Previous message: KM: "Re: Formatting CF"
- In reply to: Slobodan Brcin \(eMVP\): "Re: Qusetion about EWF protect ability"
- Messages sorted by: [ date ] [ thread ]
Date: Thu, 22 Apr 2004 10:37:10 -0700
Slobodan,
Aren't some (if not most) BIOS'es have an option to protect the MBR (or Virus Warning/Protection as they call it)?
But you right, there is always a way to have access to raw partition data bypassing EWF with enough privileges.
--
KM,
BSquare Corporation
> Hi Arlin,
>
> EWF protect partitions so virus can write to overlay but not to physical
> disk.
> But since EWF is protecting partitions only. Virus still can modify MBR or
> physical disk for that mater. (This is only issue with admin and system accounts)
>
> Regards,
> Slobodan
>
> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
> Have an opinion on the effectiveness of Microsoft Embedded newsgroups? Tell
> Microsoft!
> https://www.windowsembeddedeval.com/community/newsgroups
> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
>
> "Arlin" <anonymous@discussions.microsoft.com> wrote in message
> news:B2888E6D-87FA-4EF8-B3BD-55D936E22C61@microsoft.com...
> > The XPE help document mentioned EWF "protected hard drive while
> maintaining the appearance of read/write permission to the OS". If there is
> some virus in RAM which can control the OS files, then it can write to the
> protected hard drive, right?
>
>
- Next message: KM: "Re: freezing up even when idle"
- Previous message: KM: "Re: Formatting CF"
- In reply to: Slobodan Brcin \(eMVP\): "Re: Qusetion about EWF protect ability"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|
