Overclock.net › Forums › Components › Hard Drives & Storage › Isolate hdd so virus cannot spread?
New Posts  All Forums:Forum Nav:

Isolate hdd so virus cannot spread?

post #1 of 5
Thread Starter 
I was pondering whether it might be possible to prepare an individual drive so that if it would get a virus the virus cannot spread. Is it possible to isolate individual HDDs?

Thanks
Burger with Fries
(14 items)
 
  
CPUMotherboardGraphicsRAM
1090T @4.1GHz ASUS M4A89TD Pro/USB3 XFX 5970 Black Edition 4 x 2 GB DDR3 1600Mhz G.Skill 
Hard DriveOptical DriveCoolingOS
1x X25-M 80GB 2X SpinPoint F3 1TB Philips CD/DVD writer noctua NH-D14 Windows 7 64 Bit Professional & Win XP 32 Bit Pro 
MonitorPowerCase
Hanns-G HZ281HPB 1920x1200 27.5" Corsair HX 850W HAF 932 
  hide details  
Reply
Burger with Fries
(14 items)
 
  
CPUMotherboardGraphicsRAM
1090T @4.1GHz ASUS M4A89TD Pro/USB3 XFX 5970 Black Edition 4 x 2 GB DDR3 1600Mhz G.Skill 
Hard DriveOptical DriveCoolingOS
1x X25-M 80GB 2X SpinPoint F3 1TB Philips CD/DVD writer noctua NH-D14 Windows 7 64 Bit Professional & Win XP 32 Bit Pro 
MonitorPowerCase
Hanns-G HZ281HPB 1920x1200 27.5" Corsair HX 850W HAF 932 
  hide details  
Reply
post #2 of 5
A normal* virus can spread only if it's being executed. Which means that if there's a virus running in your system, it has been executed (example: opened a exe containing a virus if we are on windows), and the virus usually has same access capabilities as the user who began this execution process originally. Windows is rather bad in this kind of security though, so usually if you have a drive connected to the system running windows, the virus has all access to this drive as well. However, lets say the virus copies itself to the drive, and you transfer this drive to another computer, the virus wont usually spread there, unless manually executed (or executed by stuff like autorun usually enabled by default on optical drives but not on other storage devices, eg. usb sticks or hard disks). So basically, a normal* virus behaves nearly like an application that usually don't have any visible windows etc, so obviously it wont spread to other systems if brought there "safely". IF you want to experiemnt with viruses and stuff, I recommend doing it in a virtualbox that has no direct access to the host system.

(*) = by normal virus I mean one that simply executes harmful stuff and possibly spreads. Of course there are other less common types of viruses out there sometimes tampering with deeper stuff like firmware of certain devices etc. so it is still possbile in certain situations that the virus could spread when just bringing the drive to another system. Also, viruses are rarely cross-platform, so moving a drive eg. infected on a windows system to eg. a linux system for inspection more rarely lets the virus spread than if brought to another windows system.

I hope I somewhat answered your question, if not, could you be a bit more precise?
Edited by Microx256 - 5/30/13 at 2:20am
Minimachine
(9 items)
 
  
CPUMotherboardGraphicsRAM
i7-5775C Asus Maximus VII Impact EVGA GTX1080 Founders edition 2x8GB Kingston HyperX 1600Mhz 
Hard DriveMonitorPowerCase
Samsung 950 PRO 512GB M.2 NVMe 3x Asus PB287Q 4k Silverstone 600W Strider SFX NCASE M1 Rev 2 
  hide details  
Reply
Minimachine
(9 items)
 
  
CPUMotherboardGraphicsRAM
i7-5775C Asus Maximus VII Impact EVGA GTX1080 Founders edition 2x8GB Kingston HyperX 1600Mhz 
Hard DriveMonitorPowerCase
Samsung 950 PRO 512GB M.2 NVMe 3x Asus PB287Q 4k Silverstone 600W Strider SFX NCASE M1 Rev 2 
  hide details  
Reply
post #3 of 5
What above says, the virus can't spread unless it's active (Running in the background) or you excute the infected file.

You will have to use your anti-virus to quarantine it.....
Ryzen
(8 items)
 
  
CPUMotherboardGraphicsRAM
AMD Ryzen 1700 Gigabyte AX370 Gaming K5 Nvidia GTX 770 G.Skill Trident Z 16GB 3000MHz 
Hard DriveCoolingOSPower
Samsung Evo 960 M.2 Stock AMD Windows 10 Pro Superflower 650W 
  hide details  
Reply
Ryzen
(8 items)
 
  
CPUMotherboardGraphicsRAM
AMD Ryzen 1700 Gigabyte AX370 Gaming K5 Nvidia GTX 770 G.Skill Trident Z 16GB 3000MHz 
Hard DriveCoolingOSPower
Samsung Evo 960 M.2 Stock AMD Windows 10 Pro Superflower 650W 
  hide details  
Reply
post #4 of 5
Applications require Administrator permissions to copy themselves to Windows system dirs. - ProgramFiles, Windows, System, etc.

Look for a way to give the HDD the same identification criteria as for those folders - the virus will 99.9% NOT have admin permissions and won't be able to copy itself. Downside is you'll have to validate your permissions every time you copy something to the HDD.

PS: RightClick on the HDD -> Properties -> Security -> Edit permissions or Advanced - that's a good place to start looking thumb.gif
My Rig
(14 items)
 
Ex-wife's Rig
(15 items)
 
 
CPUMotherboardGraphicsRAM
Core i5 4460 AsRock H81M-DG4 Sapphire Rx470 Platinum KVR 1600 16Gb 
Hard DriveHard DriveCoolingOS
2x Seagate 3Tb Samsung 850 EVO 120 Scythe Ninja 3 Rev.B Windows 10 Pro 
MonitorKeyboardPowerCase
Fujitsu Siemens A17-2A Logitech K280e SuperFlower SF-550K12XP Thermaltake Versa H25 
MouseAudio
Logitech G402 Sony MDR XD150 
CPUMotherboardGraphicsRAM
Athlon 750K 4.0Ghz AsRock FM2A75 Pro4+ Sapphire R9 270X Dual-X Kingston 2x4Gb 1600 
Hard DriveHard DriveOptical DriveCooling
Samsung 850 EVO 120  Western Digital 320Gb LiteON DVD-RW CoolerMaster Hyper Z600 
OSMonitorKeyboardPower
Windows 7 Pro x64 Toshiba 32" FullHD TV Logitech FSP Hexa 550 
CaseMouse
DeLUX Logitech 
  hide details  
Reply
My Rig
(14 items)
 
Ex-wife's Rig
(15 items)
 
 
CPUMotherboardGraphicsRAM
Core i5 4460 AsRock H81M-DG4 Sapphire Rx470 Platinum KVR 1600 16Gb 
Hard DriveHard DriveCoolingOS
2x Seagate 3Tb Samsung 850 EVO 120 Scythe Ninja 3 Rev.B Windows 10 Pro 
MonitorKeyboardPowerCase
Fujitsu Siemens A17-2A Logitech K280e SuperFlower SF-550K12XP Thermaltake Versa H25 
MouseAudio
Logitech G402 Sony MDR XD150 
CPUMotherboardGraphicsRAM
Athlon 750K 4.0Ghz AsRock FM2A75 Pro4+ Sapphire R9 270X Dual-X Kingston 2x4Gb 1600 
Hard DriveHard DriveOptical DriveCooling
Samsung 850 EVO 120  Western Digital 320Gb LiteON DVD-RW CoolerMaster Hyper Z600 
OSMonitorKeyboardPower
Windows 7 Pro x64 Toshiba 32" FullHD TV Logitech FSP Hexa 550 
CaseMouse
DeLUX Logitech 
  hide details  
Reply
post #5 of 5
Quote:
Originally Posted by ronnin426850 View Post

Applications require Administrator permissions to copy themselves to Windows system dirs. - ProgramFiles, Windows, System, etc.

Look for a way to give the HDD the same identification criteria as for those folders - the virus will 99.9% NOT have admin permissions and won't be able to copy itself. Downside is you'll have to validate your permissions every time you copy something to the HDD.

PS: RightClick on the HDD -> Properties -> Security -> Edit permissions or Advanced - that's a good place to start looking thumb.gif

This method also requires the user to be a non-administrator account as well as keeping UAC on. Other than that, that method works aswell. biggrin.gif If you want seriously maximum security, isolate the drive to another system (preferably linux instead of windows) and make the needed security restrictions there, and access it over your LAN, this is what I do wink.gif however, I do it because then I can access the drive(s) from any computer at home, at same time if I wanted biggrin.gif
Minimachine
(9 items)
 
  
CPUMotherboardGraphicsRAM
i7-5775C Asus Maximus VII Impact EVGA GTX1080 Founders edition 2x8GB Kingston HyperX 1600Mhz 
Hard DriveMonitorPowerCase
Samsung 950 PRO 512GB M.2 NVMe 3x Asus PB287Q 4k Silverstone 600W Strider SFX NCASE M1 Rev 2 
  hide details  
Reply
Minimachine
(9 items)
 
  
CPUMotherboardGraphicsRAM
i7-5775C Asus Maximus VII Impact EVGA GTX1080 Founders edition 2x8GB Kingston HyperX 1600Mhz 
Hard DriveMonitorPowerCase
Samsung 950 PRO 512GB M.2 NVMe 3x Asus PB287Q 4k Silverstone 600W Strider SFX NCASE M1 Rev 2 
  hide details  
Reply
New Posts  All Forums:Forum Nav:
  Return Home
  Back to Forum: Hard Drives & Storage
Overclock.net › Forums › Components › Hard Drives & Storage › Isolate hdd so virus cannot spread?