Any Linux experts out there ?

Jon_01

Hi there,

I’m trying to help a friend whose managed to get a major virus/Trojan infection. The removal process has wiped a system dll (hal.dll) and we’re trying to backup the system before we try to recover.

I’ve downloaded a number of Linux live cd but I’m having a few problems with them.

I’ve go Knoppix 5.0, Phlak, Arudius, Penguin Sleuth, Mepis and Slax (both standard and killbill ed).
We’ve two problems…

They all come with cd burning s/w, but it seem impossible to get the boot disc out of the drive ? The drive locks after boot and won’t eject… I can’t see the point of putting cdr s/w on the disc if it’s impossible to use so I guess I must be missing something ????

I’m trying to copy hal.dll from a flash drive back into the sys32 folder on the windows root drive, I’ve used all the boot dis’s above and none of them with write to the sys32 folder and only one of them with copy from the flash drive !!! I get the message the I don’t have the right permission’s for the drives. I’ve gone into property’s and enabled write permission but still nothing happens ? I’ve gone in with the consol and done it wth the command line (with the command ‘chmod 766 hal.dll’) and it still say the same thing !!
Now I realize that some of these disc are forensic app’s and changing things would be bad idea, but some of them are just straight live cd’s, so what the problem ? How do I change the file system from read only ?

Any help would save what little hair I have left ….

Jon_01

Update... Just downloaded the new Ubuntu 7.04 and run that.... have the same problem, I can copy the file from the flash drive to the desktop but can't copy it back to the sys32 dir. I've added myself as a user with admin status, but it keeps saying that the dir is owned by root and won't let me access it or even logon as root (even though I know the user name and password...). I've added myself as a user to root and thats not worked either !!!

Help !

albertross_2

Have you tried doing a repair with an XP CD?

Or, if you have another PC available, create a bartpe bootcd, which will give you a windows environment.

http://www.nu2.nu/pebuilder/

Chippy_Minton

Try preceding the commands with sudo.

crox

what filesystem is windows using? is this an issue where linux can't write to ntfs?

Jon_01

Using win32.

Had to give up and reinstall from scratch, it was taking FAR too much time.

I have to say while I’m impressed with the look and the tools in the live cd’s and the speed most of them work at, I’m truly horrified that after the best part of a day working with them it proved impossible to do something as simple as move a file from a to b.
I can see why Ubuntu wouldn’t do it. The owner of the file was ‘root’ but, even with the password it wouldn’t let me logon, I added a new used with the same permissions and adding them to root group wouldn’t work… in fact nothing worked and the doc’s that come with the install were no help at all.

All in all, a nice idea, but any op system that wouldn’t let you move a file and also not tell WHY or HOW isn’t going have many takers….