[iOXeR]

I'm currently trying to remove the remaining trails of spyware on a computer. I used my live cd linux distro and mounted the drive ( mount -w /dev/hda1 /mnt/hda1 ) and I tried removing the remaining files using rm. It would output the name of the file followed by "Operation not permitted". Then, just to make sure it wasn't just a problem with these files, I tried deleting a worthless file with no luck. Is there something I'm missing?

[EDIT]
Just so you know, I also checked to see if it was a problem with the permissions, but it wasn't.

[lotuseclat79]

Originally Posted by iOXeR

I'm currently trying to remove the remaining trails of spyware on a computer. I used my live cd linux distro and mounted the drive ( mount -w /dev/hda1 /mnt/hda1 ) and I tried removing the remaining files using rm. It would output the name of the file followed by "Operation not permitted". Then, just to make sure it wasn't just a problem with these files, I tried deleting a worthless file with no luck. Is there something I'm missing?

[EDIT]
Just so you know, I also checked to see if it was a problem with the permissions, but it wasn't.

Hi iOXeR,

When you say you checked to see if it was a problem with the permissions, but it wasn't, then the question remains why?

Can you create a worthless file with just -w? It appears that you cannot delete one, so I would guess not.

Try -rwx or -wx on the mount command, and see if that works. -x permission is usually required to read a file, and is probably needed in a mounted file system to do what you want along with the -w, i.e. -rwx should work, and -wx may also. Be sure to double check the mount man page to be sure you have the correct command syntax.

-- Tom

[lynch]

The filesystem on hda1 must be ntfs or fat32 as you say there's spyware on it. Depending on which LiveCD distro you're using, ntfs may not be writable(hence removable); fat32 would be ok, though.
With Knoppix you can mount the fat drive as read/write with this command:

mount -o rw /mnt/hda1

What LiveCD are you using?
lynch

[iOXeR]

When you say you checked to see if it was a problem with the permissions, but it wasn't, then the question remains why?

Can you create a worthless file with just -w? It appears that you cannot delete one, so I would guess not.

Try -rwx or -wx on the mount command, and see if that works. -x permission is usually required to read a file, and is probably needed in a mounted file system to do what you want along with the -w, i.e. -rwx should work, and -wx may also. Be sure to double check the mount man page to be sure you have the correct command syntax.

What I meant to say was that it wasn't a problem with permissions. I read the manual for mount and it said that the -w option allowed reading and writing.

The filesystem on hda1 must be ntfs or fat32 as you say there's spyware on it. Depending on which LiveCD distro you're using, ntfs may not be writable(hence removable); fat32 would be ok, though. With Knoppix you can mount the fat drive as read/write with this command: Code: mount -o rw /mnt/hda1 What LiveCD are you using? lynch

It's ntfs. So if I understand you correctly, the LiveCD can only read ntfs and not write to it, right? I'm using Knoppix.

[Squashman]

You would be better off with a BartPE cd.

[lynch]

You would need to use the verrryyy slowww Capture ntfs utility which is in kmenu>knoppix>utilities>capture ntfs. You may have problems with that if running spk2.
Squashman's suggestion is better.
lynch

[iOXeR]

Squashman,
I have a BartPE cd and I didn't even think about it! Thanks for reminding me.

[jiml8]

Captive NTFS has problems with the 2.6 kernel; if the live CD uses that, then Captive isn't a good choice.

I only have XP on a laptop and no install disk, just an install partition. Will BartPE work with that?

[lynch]

I think you need an XP disk to create a Bartpe disk, dont you?

Requirements to build:

1. The files from your Windows Installation CD-Rom.
Supported Windows versions are:
* Windows XP Home Edition (must be slip streamed with Service Pack 1 or higher)
* Windows XP Professional (must be slip streamed with Service Pack 1 or higher)
* Windows Server 2003, Web Edition
* Windows Server 2003, Standard Edition
* Windows Server 2003, Enterprise Edition
2. PE Builder runs on Windows 2000/XP/2003/BartPE systems.
3. CD/DVD writer if you want to creat a bootable CD/DVD.

lynch

[jiml8]

That is what I understood. Was just wondering if anyone had found a way around that. I also wonder if the install partition would/could count as an install CD.