Linux and Windows rescue CD!

May 14, 2006 15:30 GMT  ·  By

Trinity Rescue Kit or TRK in short, is a Live CD Linux distribution aimed specifically at offline operations for Linux and Windows systems such as rescue, repair, password resets and cloning, and it also has the ability to update itself . With Trinity Rescue Kit you can easily recover data such as deleted files, clone Windows installations over the network, perform antivirus sweeps with 2 different antivirus products, reset windows passwords, read AND write on NTFS partitions, edit partition layout and much, much more.

This version of Trinity Rescue Kit is the evolved version of 3.0 and a complete rewrite of version 1.1 and the unfinished 2.0. Trinity Rescue Kit Live CD is mostly based on Mandrake 10.2 (Mandriva 2005) binaries and heavily adapted startup scripts. Although it requires a bit more startup time than old versions, it still is a fast booter and it can recognize even more hardware than ever, now that it?s based on kernel 2.6.14.3.

The new TRK also has a feature for automatic proxy detection and custom startup environment adaptations. An administrator can configure his LAN (using DHCP and a webserver) so Trinity Rescue Kit can tak advantage of that, making it even more powerful. Apart from that, you can have any computer run a specific script from a local folder so you can run maintenance and backups in batch.

Let's look at some of the software included on Trinity Rescue Kit:

? updatetrk (since 3.1): updates TRK with NTFS drivers, F-prot + definitions and Clamav definitions. When the script is run without arguments, it looks for a Windows pagefile.sys, creates a loopback filesystem on it and creates TRK from there. Afterwards it copies the new isofile to the Windows Temp folder, from where you can burn it to CD

? clonexp: script that uses ntfsclone to perform copies of NTFS filesystems between two computers each running their copy of Trinity Rescue Kit 3.1. One PC copies its Windows installation over the network to another PC running a TRK 3.1 with a secure shell server enabled. An easy way to clone Windows installations or recover as much as you can from a dying disk. Run it either interactively or from a single commandline

? winpass: does the same thing as in TRK 1.1: searches for all local Windows installations, runs chntpw on your SAM file and resets the password. It now also handles Windows on FAT32 correctly and uses the safe NTFS driver from the Linux kernel, so it works even without captive support

? regedit: is actually the same as winpass, but starts chntpw in interactive mode and allows you to edit a Windows registry file

? virusscan: completely rewritten, this script now has two different engines: the default is to run with the GNU Clamav antivirus which is free for everyone. This is a very good scanner, but the drawback is that it can only detect virus infected files, not clean them. So the only option is to delete them. But just to be sure we don?t delete something valuable, a quarantined backup is made first. The other part of the script uses the free-for-home-users F-prot. F-prot itself is not included in TRK but it?s downloaded from their site. F-prot DOES have the ability to disinfect files if necessary.

? ntfsundeleteall: also completely rewritten, ntfsundeleteall, a wrapper for ntfsundelete now recovers deleted files from an NTFS volume but it gives you the ability to add a recoverability percentage to the commandline. Since it only recovers files and not directories, sometimes you would have double filenames. This has been countered by adding the inode of the file at the beginning of the filename, so recoverability is 100% within the possibilities of ntfsundelete

? links: simple webbrowser which runs in framebuffer graphical mode. Handy to go and read some reference docs on the Internet

? ftp and lftp

? ssh and scp

? ms-sys: This program is used to create Microsoft compatible boot records. It is able to do the same as Microsoft?s "fdisk /mbr" to a hard disk. It is also able to do the same as Microsoft?s "sys d:" to a floppy or FAT partition except that it does not copy any system files, only the boot record is written.

? Reiserfs tools

? ext2/ext3 tools

? ntfsprogs

? dosfs tools

? tcpdump, nmap and netcat

? mdadm for offline raid configuration

? burn, a utility that stresses your CPU

? samba client: mount windows shares over the network

? shred: erase a hard disk until it?s unrecoverable even by magnetic resonance recovery

? fatback: undelete files from fat filesystems

? TestDisk: Tool to check and undelete partition, works with most common partitions

? PhotoRec: File and pictures recovery. PhotoRec has been created to recover pictures from digital camera memory and it has been extended to recover lost files from hard disk. PhotoRec is safe to use, it will never attempt to write to the drive or memory support you are about to recover from. Recovered files are instead written in the directory from where you are running the PhotoRec program.

? pico text editor

? mkisofs and cdrecord

? perl 5

Trinity Rescue Kit comes in very handy when your operating system won't boot. Have a look at some screenshots we have made for this version of TRK:

Review image
Review image
Review image
Review image
Review image

Download Trinity Rescue Kit now from Softpedia.