They should be somewhere under /mnt/hda1 , as in:
mount /mnt/hda1
cd /mnt/hda1/Doc<tab>/user_name/My<tab>
You could also try to just disinfect it: http://www.f-secure.com/v-descs/sasser_b.shtml
ok, got a situation here. wife has a laptop running XP and apparently she has the sasser virus.
I changed the boot order on her laptop and booted under Knoppix.
is there a way I can see the MS Word docs, etc she has on drive c? Mainly wanting to ftp these files off the drive then wipe the drive clean.
any sugguestions would be appreciated.
thanks,
jim
They should be somewhere under /mnt/hda1 , as in:
mount /mnt/hda1
cd /mnt/hda1/Doc<tab>/user_name/My<tab>
You could also try to just disinfect it: http://www.f-secure.com/v-descs/sasser_b.shtml
thanks for the info...been awhile since I went to linux command line and forgot the mount command...
egads once I mounted/cd, the /windows directory is gone.
it may be time just to punt and wipe this drive.
How do you mean gone? Gone as in deleted by a virus or just hidden? Does XP actually use windows or winnt for the directory?egads once I mounted/cd, the /windows directory is gone.
If you need help with mounting and fstab check out: http://www.tuxfiles.org/linuxhelp/dirs.html or ask away.
shouldn't that beOriginally Posted by Markus
mount /dev/hda1
Isn't there a "hda1" icon on the Knoppix desktop? If you click on it , Konqueror should open showing hda1 root directory. I will default mount read only, which is OK, you don't want to write to it anyway.
Here's another thought...(thinking can be a dangerous thing!). Perhaps you can use cfdisk to make a partition on the laptop HD, move all the files you want to keep into it, the repair or reformat the win O/S.
When you do get it back up running, you really should partition the HD into at least 2 partitions & keep your data separate from the O/S to make life easier "for the next time".
Rare Vintage 3DFX Voodoo Video Card for Mac 210-0382-003
$49.95
Vintage Daewoo 9910102800 Video Card
$49.99
Vintage AST Ascentia 900N 4/50 CS10 Notebook UNTESTED no cables
$29.99
Vintage Passport MIDI Interface For Macintosh Mac Apple
$20.00
Vintage Compaq 141649-004 2 Button PS/2 Gray Mouse M-S34 - FAST SHIPPING - NEW
$8.99
Vintage Classic Apple Macintosh System Boot Install Disk Floppy/CD *Pick Version
$10.39
Voltage Blaster (Enhanced) -5V ISA AT ATX Power for Vintage Retro PCs US Seller
$12.95
TWO VINTAGE MANUALS IBM / 5340 Volume C Theory Diagrams Book 1 and 2
$149.99
VINTAGE Apple Macintosh LC (FOR PARTS - DOES NOT BOOT) NO HDD #27
$49.99
NEW Vintage Macromind Director Version 3.0 Presentation Animation For Macintosh
$250.00