Half OT/ How to remove a virus on windows using Ubuntu

[Odd]

Bart Silverstrim wrote:
> 
> Ashley Benton wrote:
>> Hi, I am using Ubuntu 8.10. One of my neighbors ask me to fix his computer
>> and I am stuck. The computer is Windows 2000 and doesn't work at all by
>> itself so I mounted his hard drive on my computer. From Ubuntu I tried a few
>> anti virus programs but the only things they do is find the viruses . Since
>> I don't know Windows I don't want just to delete the files or system. Is
>> there a program that I can use from Ubuntu to fix his Windows and get rid of
>> the viruses? I would have save the documents and reinstall his Windows but
>> there are no rescue cds or floppies and I am a little lost as I don't how I
>> can help him anymore.
> 
> If it's damaged to the point where it doesn't work, your best bet is to 
> retrieve *data* files off the system...such as the my 
> documents/desktop/favorites folders from under "documents and settings" 
> that correspond to your neighbor's username...and reformat the drive.

Agreed.

> Thanks to the alternate data streams in NTFS and inadequate security 
> settings, and the fact that you said it's already not working at all, 
> you *cannot* simply disinfect the system and know for sure it's free of 
> malware.

That is true. But it's true for all OSes. Once compromised on a
root level, there's relly no guarantee that you get a clean system
after disinfection.

> Save data to another drive or CD's, then format the drive and reinstall 
> Windows then copy data back.

He doesn't have a Windows disc, and will not consider Linux either
it seems. Ashley, if I were you I'd tell him to purchase an XP OEM
disc and install that after wiping the hd. They are not that expensive,
and can still be had. Tell your neighbor to bite the bullet and realize
that this will cost him. Unless you get ahold of a W2K disc that is.
He should think about migrating away from W2K anyway, it's not
going to be supported by MS much longer. XP is supported until
2014.

-- 
Odd