Recovery from hacker attack--is it safe to delete files?

[superba]

Hi, I have got some hidden files that I can't delete from a W2000 Server machine, no matter what I do. I've just booted from a Knoppix disk (v. cool!! can't wait to learn more about Linux.) Anyhoo, please advise regarding safety of deleting these files (basically the bad files are hidden in the recycle bin on each of two drives.)

The machine seems to work okay in W2000, but it has got these rogue files on it that I can't delete. So my questions are:

1. Is it safe to delete these files using Knoppix CD?
2. Does 'root' password mean the NT administrator password?
3. How do I safely mount the drives?

Thanks very much for your help.

Maria.

[OErjan]

the drives are likely already mounted, but read only.
as to safe. depends, if you use NTFS it is not very safe, if you use FAT32 you just change read/write mode and delete/add whatever you want.
as to remounting, you rightclick on the desired icon and chose actions then remount read/wriete or something like that (not on knoppix just now)