Users online right now: 87 - Login  » search  » forum index  

cant delete pagefile.sys it worked ! Thanks

realdaniel
wrote 3 years ago


reply
I want to delete a pagefile.sys from a disk which has win instaled
i use a slax from usb

i tried a lot of commands:
root@slax:/mnt/sdh1# clear
root@slax:/mnt/sdh1# chmod +x pagefile.sys
chmod: changing permissions of `pagefile.sys': Read-only file system
root@slax:/mnt/sdh1# rm -f pagefile.sys
rm: cannot remove `pagefile.sys': Read-only file system
root@slax:/mnt/sdh1# chmod 777 pagefile.sys
chmod: changing permissions of `pagefile.sys': Read-only file system
root@slax:/mnt/sdh1#

the pagefile.sys is about 756m and infected by a troyan

where is that fantastic command that delete everything...brute force?
 
tsixe_ton_seod_ doG_doG _uoy_rof_llik_uoy_dluow
wrote 3 years ago


reply
When the disk is mounted make sure its permissions are rw not ro (Read/Write) Not (Read Only), then you may remove everything or that file only with
# rm -rf pagefile.sys

Good Luck!!!
 
Dude
wrote 3 years ago


reply
try this
umount /dev/sdh1
ntfs-3g /dev/sdh1 /mnt/sdh1
rm /mnt/sdh1/pagefile.sys
 
realdaniel
wrote 3 years ago


reply
I run Konqueror and Konsole
nothing from sdh1

it gives :

root@slax:/mnt/sdh1# umount /dev/sdh1
umount: /mnt/sdh1: device is busy.
(In some cases useful info about processes that use
the device is found by lsof(8) or fuser(1))
root@slax:/mnt/sdh1# umount /dev/sdh1
umount: /mnt/sdh1: device is busy.
(In some cases useful info about processes that use
the device is found by lsof(8) or fuser(1))
root@slax:/mnt/sdh1#
 
realdaniel
wrote 3 years ago


reply
so I try to change to permissions for that file:

root@slax:/mnt/sdh1# chmod 777 pagefile.sys
chmod: changing permissions of `pagefile.sys': Read-only file system
root@slax:/mnt/sdh1#

It doesnt worked
!
 
Dude
wrote 3 years ago


reply
post the output of the mount command
 
realdaniel
wrote 3 years ago


reply
the hard disk is mounted

and I cant unmount it
:root@slax:/mnt/sdh1# umount /dev/sdh1
umount: /mnt/sdh1: device is busy.
(In some cases useful info about processes that use
the device is found by lsof(8) or fuser(1))
root@slax:/mnt/sdh1#
 
realdaniel
wrote 3 years ago


reply
I disconnect and connect it again (the cable)
is the same
I click right on it to unmount from desktop and dont let me to do it

unmount doesnt apear in the menu
 
Dude
wrote 3 years ago


reply
Are you even reading what I asked?

just type "mount" and post the output here
 
realdaniel
wrote 3 years ago


reply
root@slax:~# mount
aufs on / type aufs (rw,si=e1a5b62c,xino=/mnt/live/memory/.aufs.xino,nowarn_perm)
/proc on /proc type proc (rw)
sysfs on /sys type sysfs (rw)
usbfs on /proc/bus/usb type usbfs (rw)
tmpfs on /dev/shm type tmpfs (rw)
/dev/sda1 on /mnt/sda1 type vfat (rw,noatime,quiet,umask=0,check=s,shortname=mixed)
/dev/sdb1 on /mnt/sdb1 type vfat (rw)
/dev/sdf1 on /mnt/sdf1 type ntfs (rw)
/dev/sdg1 on /mnt/sdg1 type ntfs (rw)
/dev/sdh1 on /mnt/sdh1 type ntfs (rw)
/dev/sdi1 on /mnt/sdi1 type ntfs (rw)
root@slax:~#
 
Dude
wrote 3 years ago


reply
As you can see, /dev/sdh1 is mounted with the ntfs native linux driver, and not with ntfs-3g.
In other words, it's mounted read-only, despite the (rw) it shows in there.

You need to unmount it and mount it with ntfs-3g, like I said above.

Restart slax in allways fresh mode, and type what I told you right after the login.
It should work
 
realdaniel
wrote 3 years ago


reply
my usb is 96%full
the move to trash apear in the right click now
but :there is no more space in trash
how i can delete it directly?...without passing throught trash?

Thanks!
 
realdaniel
wrote 3 years ago


reply
o.k.
I do it!

thanks
 
realdaniel
wrote 3 years ago


reply
it was easy and it worked !

T
Thanks again!
 

  » search  » forum index  

Post your reply

Your name (Login):

Message:

These HTML tags are allowed: <quote>, <b>, <u>, <i>, <pre>, <code>, <small>, <h1>, <h2>, <h3>, <li>



Slax is generously supported by: P&P Software GmbH and wisol technologie GmbH