Conversation
Notices
-
…using !Linux to check a laptop for viruses: booted with live !Debian !Mint; sudo apt-get update && sudo apt-get install clamav #clamscan …
-
I use ntfs-3g, find, and rm on a !GNU / !Linux live CD to remove viruses on an MS Windows system. The only way to be sure. ;) /cc @metztli
Morten Juhl-Johansen Zölde-Fejér likes this. -
@pehjota There is no way to modify files in fat/ntfs partitions without being su, right?
-
@mvdan it depends on how you mounted the partition. For instace: you are most probably allowed to modifiy dile on an automounted usb stick
-
As I recall, #ntfs-3g provides files with owner ID 0, group ID 0, and mode 0777 (rwxrwxrwx).
-
#Linux's fat drivers show files with UID 0, GID 0, & mode 0755 by default, which can be changed with "uid", "gid", & "umask" mount options.
-
@metztli Interesting. Do they get the signatures from a common source? And how often does ClamAV update it's signature database?
-
On Windows: #freshclam.exe process regularly downloads Virus Database Updates http://ur1.ca/5ufle but we're on !Linux, right? No #exe ;)
-
#ClamAv's a framework http://ur1.ca/5ufno that holds its own against AV commercial offerings
-
Is it? Or is it only date on the background page? Try it! http://ub0.cc/T0/4d read & scroll down to select relevant #AV links☛locate #ClamAV
-
Once you're satisfied that #ClamAV is just what you need to perform an autopsy on Windows, make sure to contribute data http://ub0.cc/1j/xh