From owner-freebsd-questions@FreeBSD.ORG Wed Jun 8 15:49:14 2005 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 18D7316A41F for ; Wed, 8 Jun 2005 15:49:14 +0000 (GMT) (envelope-from tshadwick@goinet.com) Received: from mail.goinet.com (mail.goinet.com [208.207.72.15]) by mx1.FreeBSD.org (Postfix) with ESMTP id 6B24743D5D for ; Wed, 8 Jun 2005 15:49:13 +0000 (GMT) (envelope-from tshadwick@goinet.com) Received: from mail.goinet.com (localhost.goinet.com [127.0.0.1]) by mail.goinet.com (8.13.1/8.13.1) with ESMTP id j58Fn1rK033235; Wed, 8 Jun 2005 10:49:01 -0500 (CDT) (envelope-from tshadwick@goinet.com) Received: from localhost (tshadwick@localhost) by mail.goinet.com (8.13.1/8.13.1/Submit) with ESMTP id j58Fn0gL033228; Wed, 8 Jun 2005 10:49:00 -0500 (CDT) (envelope-from tshadwick@goinet.com) X-Authentication-Warning: mail.goinet.com: tshadwick owned process doing -bs Date: Wed, 8 Jun 2005 10:49:00 -0500 (CDT) From: Tony Shadwick To: Brent Wiese In-Reply-To: <200506081144156.SM03920@quickstep> Message-ID: <20050608104723.L23064@mail.goinet.com> References: <200506081144156.SM03920@quickstep> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed X-Virus-Scanned: ClamAV version 0.85.1, clamav-milter version 0.85 on mail.goinet.com X-Virus-Status: Clean Cc: freebsd-questions@freebsd.org Subject: Re: Bootable CD with virus checking for NTFS X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 08 Jun 2005 15:49:14 -0000 On Wed, 8 Jun 2005, Brent Wiese wrote: > I've been searching around for a bootable CD that can virus fix NTFS > partitions. Obviously that means it needs to be able to mount NTFS > partitions as RW. > > I've found several CD's based on Linux that will check in RO mode, but none > that will (safely anyways) in RW. > > Pipe dream? > > Heck, doesn't even need to be free as long as the cost is reasonable. > > Just so extra emails aren't generated, I've tried: > > Helix > Ultimate Boot CD (this one claims NTFS RW, but when I boot, it appears to be > RO... Haven't actually tried using on an infected system yet) > Auditor > Whoppix Just so you know, I'm pretty sure all of the LiveCD's go RO by default, even if the kernel is compiled to allow RW. That's just a safety precaution against users that don't know the limits and dangers of writing to an NTFS volume. You can still pop open a terminal and re-mount it RW by hand, although I would suggest running clam (that's what you're using, right?), and if you FIND a virus, mount it RW and either remove it by hand or run clam again again allow clam to clean up the mess then.