Skip to main content
deleted 61 characters in body; edited title
Source Link
Anders
  • 65.9k
  • 25
  • 188
  • 227

Ransomware - can it Can ransomware affect hidden or 'unmounted'"unmounted" drives?

I have an understanding of how Ransomwareransomware works to a certain extent. But, I would like some input as to what it CANcan do if the volumes/drives that are on a workstation are not visible or are not formatted according to a Windows workstation.

In my setup I have 2two situations.

  1. I use TrueCrypt (old program but it works for me), in which a reserved DRIVEdrive letter appears as an unformatted drive unless you MOUNTmount your personally secured/encrypted drive. In this case, the Ransomware would only see an unformatted drive (let's say drive X:).

  2. I have a partition that I set to hidden using a partitioning tool.

In either of these scenarios, can a Ransomwareransomware attack actually take out the data or not?

Please let me know if you have any input on this.

Thanks.

Ransomware - can it affect hidden or 'unmounted' drives?

I have an understanding of how Ransomware works to a certain extent. But, I would like some input as to what it CAN do if the volumes/drives that are on a workstation are not visible or are not formatted according to a Windows workstation.

In my setup I have 2 situations.

  1. I use TrueCrypt (old program but it works for me), in which a reserved DRIVE letter appears as an unformatted drive unless you MOUNT your personally secured/encrypted drive. In this case, the Ransomware would only see an unformatted drive (let's say drive X:)

  2. I have a partition that I set to hidden using a partitioning tool.

In either of these scenarios, can a Ransomware attack actually take out the data or not?

Please let me know if you have any input on this.

Thanks.

Can ransomware affect hidden or "unmounted" drives?

I have an understanding of how ransomware works to a certain extent. But, I would like some input as to what it can do if the volumes/drives that are on a workstation are not visible or are not formatted according to a Windows workstation.

In my setup I have two situations.

  1. I use TrueCrypt (old program but it works for me), in which a reserved drive letter appears as an unformatted drive unless you mount your personally secured/encrypted drive. In this case, the Ransomware would only see an unformatted drive (let's say drive X:).

  2. I have a partition that I set to hidden using a partitioning tool.

In either of these scenarios, can a ransomware attack actually take out the data or not?

Source Link
Harry
  • 21
  • 1
  • 2

Ransomware - can it affect hidden or 'unmounted' drives?

I have an understanding of how Ransomware works to a certain extent. But, I would like some input as to what it CAN do if the volumes/drives that are on a workstation are not visible or are not formatted according to a Windows workstation.

In my setup I have 2 situations.

  1. I use TrueCrypt (old program but it works for me), in which a reserved DRIVE letter appears as an unformatted drive unless you MOUNT your personally secured/encrypted drive. In this case, the Ransomware would only see an unformatted drive (let's say drive X:)

  2. I have a partition that I set to hidden using a partitioning tool.

In either of these scenarios, can a Ransomware attack actually take out the data or not?

Please let me know if you have any input on this.

Thanks.