--- On Wed, 11/8/10, Ashish Verma <[email protected]> wrote:
> 
> 
> I have tried overwriting the exe files using the dd command
> (find -name *\
> .exe ./ -exec dd -if=/dev/zero or some text file of={}
> bs=512 count=some
> count enough to override the file size \;) to get rid of
> whatever code is in
> the virus.
> 
> After running the above command, ls -l does shows the new
> attributes of the
> file in terms of size and modified date etc, however again
> when I delete the
> file, the original attributes are restored.
> 
> Then I tried formatting it, however after a certain point
> the format fails,
> because again the access mode changes to read only mode.
> 
> I then tried overwriting the whole disk with the dd
> -if=/dev/zero, but that
> fails too after certain point for the same reason.
> 
> 
Try mounting as superuser. Do not allow normal udev to mount. Just try deleting 
using find as superuser, I had success in such cases.

Raman.P
blog:http://ramanchennai.wordpress.com/



_______________________________________________
ILUGC Mailing List:
http://www.ae.iitm.ac.in/mailman/listinfo/ilugc

Reply via email to