Score:0

Clamscan cannot remove 'Read Only' viruses in /media/user/Windows

vi flag

I ran a clamscan -r -i --remove / on my Ubuntu 22.04, which is installed alongside Windows 10 on my computer, and it gave me the following results:

/media/<me>/Windows/Program Files/Common Files/Adobe/Microsoft/EdgeWebView/PlayReadyCdm/_platform_specific/win_x64/playreadycdm.dll: Win.Ransomware.Generic-9977355-0 FOUND
traverse_unlink: Failed to unlink: /media/<me>/Windows/Program Files/Common Files/Adobe/Microsoft/EdgeWebView/PlayReadyCdm/_platform_specific/win_x64/playreadycdm.dll
Error:Read-only file system
ERROR: Can't remove file '/media/<me>/Windows/Program Files/Common Files/Adobe/Microsoft/EdgeWebView/PlayReadyCdm/_platform_specific/win_x64/playreadycdm.dll'
/media/<me>/Windows/Program Files/Common Files/microsoft shared/ClickToRun/C2RUI.en-us.dll: Win.Malware.Genpack-9879542-0 FOUND
traverse_unlink: Failed to unlink: /media/mark/Windows/Program Files/Common Files/microsoft shared/ClickToRun/C2RUI.en-us.dll
Error:Read-only file system
ERROR: Can't remove file '/media/<me>/Windows/Program Files/Common Files/microsoft shared/ClickToRun/C2RUI.en-us.dll'
LibClamAV Warning: cli_codepage_to_utf8: iconv error: An incomplete multibyte sequence has been encountered in the input.
/media/<me>/Windows/Program Files (x86)/Microsoft Visual Studio/2017/Community/Common7/Tools/mfc140jpn.dll: Win.Malware.Fileinfector-9834808-0 FOUND
traverse_unlink: Failed to unlink: /media/<me>/Windows/Program Files (x86)/Microsoft Visual Studio/2017/Community/Common7/Tools/mfc140jpn.dll
Error:Read-only file system
ERROR: Can't remove file '/media/<me>/Windows/Program Files (x86)/Microsoft Visual Studio/2017/Community/Common7/Tools/mfc140jpn.dll'
/media/<me>/Windows/Program Files (x86)/Microsoft Visual Studio/2017/Community/Common7/Tools/mfc140rus.dll: Win.Malware.Fileinfector-9835297-0 FOUND
traverse_unlink: Failed to unlink: /media/<me>/Windows/Program Files (x86)/Microsoft Visual Studio/2017/Community/Common7/Tools/mfc140rus.dll
Error:Read-only file system
ERROR: Can't remove file '/media/<me>/Windows/Program Files (x86)/Microsoft Visual Studio/2017/Community/Common7/Tools/mfc140rus.dll'
/media/<me>/Windows/Program Files (x86)/Microsoft Visual Studio/2017/Community/VC/Redist/MSVC/14.16.27012/debug_nonredist/x64/Microsoft.VC141.DebugMFC/mfcm140d.dll: Win.Malware.Barys-9833088-0 FOUND
traverse_unlink: Failed to unlink: /media/<me>/Windows/Program Files (x86)/Microsoft Visual Studio/2017/Community/VC/Redist/MSVC/14.16.27012/debug_nonredist/x64/Microsoft.VC141.DebugMFC/mfcm140d.dll
Error:Read-only file system
ERROR: Can't remove file '/media/<me>/Windows/Program Files (x86)/Microsoft Visual Studio/2017/Community/VC/Redist/MSVC/14.16.27012/debug_nonredist/x64/Microsoft.VC141.DebugMFC/mfcm140d.dll'
/media/<me>/Windows/Program Files (x86)/Microsoft Visual Studio/2017/Community/VC/Redist/MSVC/14.16.27012/debug_nonredist/x64/Microsoft.VC141.DebugMFC/mfcm140ud.dll: Win.Malware.Barys-9833088-0 FOUND
traverse_unlink: Failed to unlink: /media/<me>/Windows/Program Files (x86)/Microsoft Visual Studio/2017/Community/VC/Redist/MSVC/14.16.27012/debug_nonredist/x64/Microsoft.VC141.DebugMFC/mfcm140ud.dll
Error:Read-only file system
ERROR: Can't remove file '/media/<me>/Windows/Program Files (x86)/Microsoft Visual Studio/2017/Community/VC/Redist/MSVC/14.16.27012/debug_nonredist/x64/Microsoft.VC141.DebugMFC/mfcm140ud.dll'
LibClamAV Warning: SWF: declared output length != inflated stream size, 12999492 != 16405452
LibClamAV Warning: SWF: declared output length != inflated stream size, 2303109 != 2379158
LibClamAV Warning: cli_scanxz: decompress file size exceeds limits - only scanning 27262976 bytes
LibClamAV Warning: cli_scanxz: decompress file size exceeds limits - only scanning 27262976 bytes
/media/<me>/Windows/Windows/System32/mfcm140d.dll: Win.Malware.Barys-9833088-0 FOUND
traverse_unlink: Failed to unlink: /media/<me>/Windows/Windows/System32/mfcm140d.dll
Error:Read-only file system
ERROR: Can't remove file '/media/<me>/Windows/Windows/System32/mfcm140d.dll'
/media/<me>/Windows/Windows/System32/mfcm140ud.dll: Win.Malware.Barys-9833088-0 FOUND
traverse_unlink: Failed to unlink: /media/<me>/Windows/Windows/System32/mfcm140ud.dll
Error:Read-only file system
ERROR: Can't remove file '/media/<me>/Windows/Windows/System32/mfcm140ud.dll'

The files I checked from the list say they have been accessed and/or modified at various times over the last four years. Are these, as strange as it may seem, supposed to be there, or do I actually have viruses I need to remove?

How would I have gotten these viruses, and how can I remove them given these errors?

Terrance avatar
id flag
Correct. When a drive is read only you will not be able to remove any files from it. It will have to be remounted as Read/Write before anything can happen. However, this can be extremely dangerous on a Windows drive and you might corrupt it by doing it. Also, the drive might be locked by Windows Fast Startup. That being said, you remount it as `sudo mount -o remount,rw /media/<me>/Windows`
I sit in a Tesla and translated this thread with Ai:

mangohost

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.