The Trinity Rescue Kit is a bootable live CD that can be used to disinfect a system. It can also start a SAMBA server to allow you to pull files off of the system you boot from across the network.
Here are some of the features:
-easily reset windows passwords with the improved winpass tool
-simple and easy menu interface
-5 different virus scan products integrated in a single uniform commandline with online update capability
-full ntfs write support thanks to ntfs-3g
-winclean, a utility that cleans up all sorts of unnecessary temporary files on your computer.
-clone computers over the network via multicast.
-wide range of hardware support (kernel 2.6.35 )
-contributed backup utility called "pi", to automate local machine backups
-easy script to find and mount all local filesystems
-self update capability to include and update all virusscanners + local changes you made to TRK.
-full proxyserver support.
-run a samba fileserver (windows like filesharing)
-run a ssh server
-recovery and undeletion of files with utilities and procedures
-recovery of lost partitions
-evacuation of dying disks
-full read/write and rpm support
-UTF-8 international character support (select keyboard language from the scrollable textmenu at startup)
-2 rootkit detection utilities
-most software updated to recent versions
-literally thousands of changes and bugfixes since version 3.3
-elaborated documentation, including manpages for all commands (also TRK 's own)
1. If you don't already have one, prepare a grub4dos bootable USB drive using RMPrepUSB. Make sure you choose FAT32 as this is the most compatible for linux OS's (and for DOS) and use the Install grub4dos button on RMPrepUSB to install a recent version of grub4dos (older versions may not work!).
2. Download the v3.4 ISO file from the TRK website download page (I used build 372)
3. Mount the ISO file using ImDisk or CloneDrive or any other ISO mounting utility
4. Copy the whole \trk3 folder to your USB drive
5. Copy these three files from the root of the mounted ISO file volume to the USB drive's \trk3 folder
6. Create a file on the USB drive called \trk3\menu.lst and cut and paste the text below into it and save the file (check the extension is .lst and not .txt!):
echo PLEASE CHECK THIS DRIVE'S VOLUME LABEL = %VOL% (or you will get an error!)
title 0 : Run Trinity Rescue Kit 3.4 (default mode, with text menu)
8. Finally, change the word highlighted in the menu.lst file so that the volume label of your own USB drive is used instead and save the file (i.e. replace the text RMPREPUSB with your own USB drive's volume label).
WARNING: The volume label is case sensitive - used the same case letters! For instance, if in My Computer the USB drive is listed as MYUSB then edit the line to say set VOL=MYUSB using uppercase letters.
Note: You can get the volume label directly from the USB volume like this:
# get first character of the current volume label as VOL variable - the number 30704 will be different for each drive you make! See Tutorial 86 for the details on how to get magic number!
# this will only work if the volume label is the first entry in the sector.
cat --length=1 (hd0)30704+1 | set VOL=
9. You can now try booting from your USB drive to see if it works (or try running using QEMU first to check it works - just press F11 in RMPrepUSB to try it).
If the boot stops at the highlighted text, check the volume name is set correctly!
7. There should also be a \trk3 folder on the NTFS drive which has the kernel.trk and initrd.trk files in it (as described above). The volume label of the NTFS drive does not matter and does not need to be changed.