|
From: Szakacsits S. <sz...@si...> - 2003-08-22 08:17:33
|
On Wed, 20 Aug 2003, [ISO-8859-1] S=E9bastien Gadrat wrote: > I Have a dual boot on my computer (windows XP and SuSE linux). I got a > worm on XP which is hidden in the System Volume Information directory a= t > the root of the partition (c:\). The problem is that my anti-virus can > see him when it wants to do something but it cannot destroy it because > the directory cannot be read even by the administrator of the system. S= o > I think the only solution is to remove the file in which it is hidden > but I cannot do that under windows. So, I wonder whether your NTFS > driver for Linux can write (in my case, only erase) a file on a XP NTFS > partition ? No. But you could overwrite the file with arbitrary values (e.g. with 0).= I don't know the effect because you didn't write what worm you have. In the recent 2-3 days there were 4-5 bigger ones. > Others suggestions are welcome if you know other way to get rid of this > worm... Most AV vendor have additional removal tools for specific worms. Szaka |
