Results 1 to 4 of 4
Hello: I have a pretty bizarre situation that perhaps some of you might have ideas on. I have two computers, one Windows (connected to internet) and one Linux. I use ...
Enjoy an ad free experience by logging in. Not a member yet? Register.
- 08-29-2006 #1
Unexpected exe files
I have a pretty bizarre situation that perhaps some of you might have ideas on.
I have two computers, one Windows (connected to internet) and one Linux. I use a USB drive to move files between the two. Linux keeps setting up recycle bins on the drive which for some reasons seem difficult to empty.
Last week when trying to empty the recycle bin I deleted the entire contents of the drive. However, I installed Foremost and got everything I expected back (about 215MB data).
The surprise was that in the folder Foremost outputted what it recovered to included 4.4Gb of exe files! And the USB was 1Gb, and to my knowledge there should have be no exe files on the drive!
I guess this suggests a security problem on the Windows computer. I'd like to try and work out what was going on. Is there any way to examine the exe's using Linux to see what they were up to?
- 08-30-2006 #2
I'm just stabbing at the dark, but you could probably use WINE to figure out what those EXE files do. Then again, I wouldn't do that unless you know for sure what those files are. Also, it is entirely possible, that the program you used recovers all data that has been recently deleted on the drive, including windows data. Or, i'm probably just really confused...
- 08-31-2006 #3
Yes, the program recovers everything. This is there shouldn't have been any exe files. I'm thinking they were hidden by some malicious process and I have 'accidentally' recovered them.
I guess the best thing to do is just a complete wipe of the USB drive. Can anyone recommend some programe that will wipe the drive? I guess I need something between srm and Darik's Boot and Nuke. Is there a Linux version of BCWipe maybe?
Some programs are listed here but a recommendation would be good:
- 08-31-2006 #4
There's a GNU programme called Wipe. Find it here. I would read the manual very carefully: I seem to remember some warnings about something or other.I am always doing that which I can not do, in order that I may learn how to do it. - Pablo Picasso