If Kanotix is similar Knoppix I guess the $PATH variable for root has a different (more restricted) set of paths to a normal user. This is partly for security.
This can be tested by
Code:
$PATH
followed by <enter> at a terminal window. Do this for root and for a normal user and see if this helps explain what has happened.