Hi Ashley,
Ashley Maher wrote:
> The hard drive from a badly infected windows computer has been put into
> an external case.
>
> What are peoples favourite tools for inspecting files as they are
> "rescued" from this drive. The drive is going to be attached to a Linux
> computer. There are business files on it so we do need to get some
> files. However we can not risk reinfecting the original windows host again.
>
> Thanks for any suggestions.
Simple solution:
- Download clamav and run freshclam first.
- Scan the files on the partition.
- Run cp/dd/mv/tar/gzip over ( {a freshly formatted disk} or {a tmp
location, format and back} :)
Its the most straight-forward solution that exist.
--
Cheers,
Ishwor Gurung
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html
