Radified Community Forums
http://radified.com/cgi-bin/yabb2/YaBB.pl
Rad Community Technical Discussion Boards (Computer Hardware + PC Software) >> Norton Ghost 2003,  Ghost v8.x + Ghost Solution Suite (GSS) Discussion Board >> Can Ghost images be infected with a virus ?
http://radified.com/cgi-bin/yabb2/YaBB.pl?num=1139046793

Message started by Stephen on Feb 4th, 2006 at 5:53am

Title: Can Ghost images be infected with a virus ?
Post by Stephen on Feb 4th, 2006 at 5:53am
I was wondering if a ghost 2003 image can be infected with a virus, thus making it usless ?

Title: Re: Can Ghost images be infected with a virus ?
Post by NightOwl on Feb 4th, 2006 at 10:21am
Stephen

If the source for a Ghost image has a virus on it, Ghost will save that infection, as is, to the Ghost image.  I don't think that would make the image file corrupt and unusable--but, when restored, the system would be *infected*.

I've not heard of a virus that targets Ghost image files after they have been created, and thus makes them corrupt and unusable--but, I'm sure that could be done by a virus maker if that was their intent.

Are you dealing with a specific *problem*?

Title: Re: Can Ghost images be infected with a virus ?
Post by Pleonasm on Feb 4th, 2006 at 3:54pm
Stephen, one approach to alleviate your concerns is to construct and save a MD5 hash of the Ghost image.  If you recreate the hash at a later date and the value is different, then something inside the image has changed.  If the hash value is identical, however, you can be certain that file has been unaltered by a virus or anything else.

Reference:  http://www.fastsum.com/

Title: Re: Can Ghost images be infected with a virus ?
Post by Stephen Butler on Feb 4th, 2006 at 9:49pm
Thanks for your help guys, Im not dealing with a problem at the moment, i just wanted to prepare myself if its posable.

Title: Re: Can Ghost images be infected with a virus ?
Post by Pleonasm on Feb 6th, 2006 at 5:59pm
Stephen, I understand that you are working with Ghost 2003.  In the event that you make the transition to Ghost 9/Ghost 10, you then have the option of mounting the image (i.e., “recovery point”) as a drive.  Once this simple action is taken, you can then run an anti-virus utility against that drive to discover whether or not it is infected.

Radified Community Forums » Powered by YaBB 2.4!
YaBB © 2000-2009. All Rights Reserved.