Malware in windows (yes), possibly rootkit/bootkit. Don't want to take any chances. So, wiped drive with DBAN foolishly (PRNG, 8 pass). Later came to know that DBAN does not kill HPA (host protected area) and DCO (Drive configuration overlay) which are "hidden areas" (if present) in a hard drive. Saw that HDDErase made by CMRR can remove DCO and HPA, if present. But project was stopped in 2005 or 7. So, I came to HDPARM of linux in the hope that it will wipe my HDD 100% clean so that i can install crappy windows again on a 100% clean hard drive. As an aside, I also looked at "BC Wipe Total Wipeout" which does HPA and DCO removal @ $50.
Current setup - Ubuntu 11 on 3.6GB usb flash/stick drive. My HDD has no operating system.
Me - Average computer user with little bash skill, i.e I don't really know what I am doing.
If you want to see the presence of HPA, you have use
hdparm -N /dev/sda. It shows me the number of sectors and that HPA is disabled.
What is this /dev/sda ? Is it my hard drive or USB stick drive on which I have ubuntu ? I guess its the hard drive because I tried a command and saw the description of a hard drive in the results. I tried
sudo hdpamr -I /dev/sda. Here is some of the output -
ATA device, with non-removable media Model Number: ST320LT007-9ZV142
Its a Seagate 320GB, 7200RPM drive.
sudo hdparm --dco-identify /dev/sda
/dev/sda: DCO Revision: 0x0001 The following features can be selectively disabled via DCO: Transfer modes: mdma0 mdma1 mdma2 udma0 udma1 udma2 udma3 udma4 udma5 udma6(?) Real max sectors: 625142448 ATA command/feature sets: SMART self_test error_log security HPA 48_bit (?): selective_test conveyance_test write_read_verify (?): WRITE_UNC_EXT SATA command/feature sets: (?): NCQ interface_power_management SSP
What does this DCO output mean ? How do I ensure that there is no possibility of malware on the DCO ?
Is there a way to find out the size in terms of GB instead of sectors ?
Will hdparm do a 100% hdd wipe to kill malware that reside in HPA and DCO ? I saw this in the wiki page and was a little worried -
hdparm has a more serious drawback: it can crash a computer and make data on its disk inaccessible if certain parameters are misused. Out of approximately sixty-seven parameters, several are dangerous and could result in "massive filesystem corruption" when used indiscriminately.