I was given an old 1 TB hard drive, and the previous owner said they may have accidentally downloaded a malicious file onto it. I'd like to install the drive in my NAS, but I'm not sure whether simply formatting it is enough or whether I should use special software. I can connect it to an older Windows laptop, though I want to avoid putting that computer or any other drives at risk. What's the safest way to erase and check it before using it?
3 Answers
If the drive is going into a NAS, you generally don’t need antivirus software for it. Disconnect any other internal or external drives from the laptop, boot from a Linux live USB or another trusted boot environment, delete the existing partitions, and fully wipe or format the target drive. Then let the NAS initialize and format it when you add it. Be extremely careful to select the correct disk.
A normal full format or a complete partition removal is enough for an ordinary malicious file. You don’t usually need multiple wipe passes or special malware-removal tools, since the NAS will be creating a new filesystem anyway. A live environment is preferable if you don’t trust the drive’s contents, because it prevents anything on the old installation from running.
Before relying on it in a NAS, check the drive’s SMART health and scan for bad sectors with a tool such as CrystalDiskInfo or the utilities included in a reputable bootable maintenance environment. An old desktop drive with a questionable history may fail soon, so replacing it could be safer than trusting it with NAS data. If the previous owner cannot explain what happened, discarding the drive is also a reasonable option.
That makes sense. I’ll disconnect the laptop’s normal drive first and make absolutely sure I’m wiping the right disk.