Rootkit Problem

[fedorafan2]

I know my system has a rootkit installed on it and I am trying to get rid of it. I tried to use knoppix to run chkrootkit, but when I try to mount hda2 it says
Mount:
I could not determine the filesystem type, and none was specified.

When I run

mount -t ext2 /dev/hda2 /mnt/hda2

it says:
wrong fs type, bad option, bad superblock on /dev/hda2, missing codepage or other error

Any ideas on how to get it to mount so I can scan it?

[Zotter]

Boot knoppix - at the command line, run:

fdisk -l

what does that say?

[fedorafan2]

It does nothing (just comes up with a new prompt)

I am able to mount the boot partiton /dev/hda1

[pete_1967]

It's probably an LVM volume.

Try

# vgscan --mknodes
# vgchange -ay
# lvscan

That should detect and activate all logical volumes.

Then try to mount it with

# mount /dev/VolGroup00/LogVol00 /mnt

In case you got 2 groups with same name, you need to rename another one with vgrename