Half OT/ How to remove a virus on windows using Ubuntu

[Ray Parrish]

Ashley Benton wrote:
>
>
> On Sat, Mar 14, 2009 at 3:18 PM, Lorenzo Luengo <lluengo at dgeo.udec.cl 
> <mailto:lluengo at dgeo.udec.cl>> wrote:
>
>     Ashley Benton escribió:
>     > Hi, I am using Ubuntu 8.10. One of my neighbors ask me to fix his
>     > computer and I am stuck. The computer is Windows 2000 and
>     doesn't work
>     > at all by itself so I mounted his hard drive on my computer. From
>     > Ubuntu I tried a few anti virus programs but the only things they do
>     > is find the viruses . Since I don't know Windows I don't want
>     just to
>     > delete the files or system. Is there a program that I can use from
>     > Ubuntu to fix his Windows and get rid of the viruses? I would have
>     > save the documents and reinstall his Windows but there are no rescue
>     > cds or floppies and I am a little lost as I don't how I can help him
>     > anymore.
>     > Any help would be appreciated
>     >
>     If you know the files, you may get them from a clean system and
>     overwrite them. This should be enough to fix the system, i did it once
>     with mine and it worked.
>
>
>
> That could be a good idea I'll check if Windows XP or 98 has the same 
> files and will try this way after I finish with image part.
> Thanks for the idea it may be easier for  me this way.
>
> Thanks
>
> Meg

No, if the i386 folder is actually intact, you already have the files 
you will need to replace the infected ones on the Windows drive, Do 
*not* try to get them from another version of Windows, as they will not 
be the correct versions.

There may actually be a small problem with that approach, as the files 
in the i386 folders that you need may or may not be compressed, and 
could need a proprietary Windows program to decompress them. You can 
recognize the compressed ones, as they will have the same filenames, and 
extensions, as the ones you need to replace,, with the exception that 
the last character of their file extensions will be an under score 
character instead of the real last character of the uncompressed files.

You could of course try to make a Bart PE pre-installation disc, which 
is basically a bootable CD running Windows with some utilities on it, 
like anti virus programs, and the required file expansion command to 
expand the files in the i386 folder. To make this disc, the files in the 
i386 folder will be required, and will need to be in good condition. It 
does not make a full fledged Windows installation CD due to license 
restrictions.

Well, that's a bust! I just checked, and it only works with Windows XP 
or Server 2003 versions. I'm checking out the Wikipedia page about it, 
and it has led me to the following bootable CD which can also be used, 
but it isn't strictly legal, as it includes software that the author of 
the disc does not have any license to be distributing.

<http://www.hiren.info/pages/bootcd> Hiren's Boot CD

There are more links to other CD's which you can burn, and boot from to 
clean up a Windows installation, on the Wikipedia page for Bart's PE CD, 
which is located here.

<http://en.wikipedia.org/wiki/BartPE> Scroll down to near the bottom of 
that page, to find links to other Boot CD's available for this purpose. 
One or more of them will likely give you the tools you need.

I hope this helps you get the system back up and running.

Later, Ray Parrish

http://www.writingsoftheschizophrenic.com/