Re: More along the lines of malware disinfection
Mike Moratz-Coppins <[email protected]>
| Newsgroups | gmane.comp.security.microsoft |
|---|---|
| Message-ID | <[email protected]> |
Express Web Systems, Inc. wrote: > The problem with accessing the "Documents and Settings" folder is a tough > one to crack, as I didn't have to deal with it in my instance (the files > were located in a hidden directory in C:\Windows\). You might want to try > liveCD that supports reading and writing to NTFS (if they are using NTFS, or > if you are lucky, just access the drive via FAT32). AFAIK most live CDs just grant read-only access to NTFS. Which one would you recommend? > As a different avenue of approach, maybe you can accomplish something with > BartPE. That would allow you to boot into windows and run various apps > independent of the compromised OS. I haven't heard of that before, I'll read up about it. -- Mike Moratz-Coppins [email protected] http://www.mikeymike.org.uk/