+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+---- Thread: What kind of malware can survive a full clean install of windows? (/showthread.php?tid=6252920)
What kind of malware can survive a full clean install of windows? - SIM-5022267 - Oct 3, 2023
A full clean install of windows and PC should remove all malwares? Not to mention reformating the drives completely.
In the case where someone who has done this multiple times, and yet continues to get infected. What are possibilities?
There were no downloading of anything malicious, no clicking on strange links, no response to suspicious emails or texts.
Also in the case of a bios virus, it's been flashed and updated many times.
RE: What kind of malware can survive a full clean install of windows? - BiNBo - Oct 3, 2023
Could be a number of things, the malware could be embedded into the firmware. When embedded into the firmware of hardware components, even BIOS flashing and updates might not completely remove the malware. It's also possible that it's being reinfected from external sources such as network or other external devices that are infected. It's also slim but possible chance that the installation media has been compromised. More advanced malware can exploit vulnerabilities or leave backdoors that allow persistence even after a clean install.
RE: What kind of malware can survive a full clean install of windows? - SIM-5022267 - Oct 3, 2023
(Oct 3, 2023 11:17 AM)BiNBo Wrote: Could be a number of things, the malware could be embedded into the firmware. When embedded into the firmware of hardware components, even BIOS flashing and updates might not completely remove the malware. It's also possible that it's being reinfected from external sources such as network or other external devices that are infected. It's also slim but possible chance that the installation media has been compromised. More advanced malware can exploit vulnerabilities or leave backdoors that allow persistence even after a clean install.
In this case, is it best to just get a brand new system and network?
RE: What kind of malware can survive a full clean install of windows? - webdev77 - Oct 3, 2023
(Oct 3, 2023 11:26 AM)randomness528432 Wrote: In this case, is it best to just get a brand new system and network?
What other option do you have at that point besides living with questionable hardware?
RE: What kind of malware can survive a full clean install of windows? - aerohacker - Oct 4, 2023
(Oct 3, 2023 11:04 AM)randomness528432 Wrote: A full clean install of windows and PC should remove all malwares? Not to mention reformating the drives completely.
In the case where someone who has done this multiple times, and yet continues to get infected. What are possibilities?
There were no downloading of anything malicious, no clicking on strange links, no response to suspicious emails or texts.
Also in the case of a bios virus, it's been flashed and updated many times.
There are a number of possibilities for this...
1 - What kind of strange behavior the computer is doing to make you think that you are infected?
2 - If even after formatting the HD/SSD, the Operating System still infected with some Malware, then it can be installed through:
- BIOS/UEFI
- HD/SSD (Some Malware that install in a "secret area", survive and reinstall
- Modem/Router
- CD/DVD/BD or USB Stick with infected or modified ISO
3 - Are you using some crack or keygen to activate Windows, Office and/or another paid software?!
RE: What kind of malware can survive a full clean install of windows? - DramaKing - Oct 6, 2023
It's not impossible to have a rootkit in hard drive firmware (the secret area), which wouldn't be affected by a reformat and clean install. Ignore the modem/router possibility above. Do you know what the malware is?