Re: How to clean virus-infected files ?

From: Alberto M R Davila (amrdavila_at_yahoo.com)
Date: 06/28/04

  • Next message: Douglas Furlong: "[OT] CD boot disk for BIOS updates" 
    Date: Mon, 28 Jun 2004 03:46:58 -0700 (PDT)
To: For users of Fedora Core releases <fedora-list@redhat.com>

    Thanks Charles,

    Your reply is useful, my only question here is if the "--remove" option of
    clamscan will remove the virus or the file ? When I used F-Prot with the
    "rename infected files" it renamed my "Inbox.mbox" file... so I would not
    like to loose the file, but clean it ... I can hardly use my keyboard,
    every key I press do print extra characters.... any help ?

    Thanks a million,

    Alberto

    --- Charles Howse <chowse@charter.net> wrote:
    > -----BEGIN PGP SIGNED MESSAGE-----
    > Hash: SHA1
    >
    > On Sunday 27 June 2004 05:03 pm, Alberto M R Davila wrote:
    > > Hello,
    > >
    > > I use FC1 and have the following clamav RPMs installed:
    > >
    > > clamav-0.73-1.1.fc1.dag
    > > clamav-db-0.73-1.1.fc1.dag
    > > clamav-milter-0.73-1.1.fc1.dag
    > >
    > > I use VmWare 4.0 where I have win98 as a "guest" system... My clamscan
    > > tool detected the infected files listed below, how I should clean them
    > ?
    > > My keyboard is having a strange behaviour, typing more letters than
    > the
    > > ones I press... any tips ?
    >
    > This bash script works fine for me to scan and remove (clean)...
    > - ---------------------------------------
    > #!/bin/bash
    >
    > echo "Recursively scanning /root."
    > clamscan -r -i /root
    > if [ $? -eq 1 ] ; then
    > echo -n "Remove virus(es)? [y/n] "
    > read i
    > if [ $i = y ] ; then
    > clamscan -r -i --remove /root
    > fi
    > fi
    >
    > echo
    >
    > echo "Recursively scanning /home/charles."
    > clamscan -r -i --mbox /home/charles
    > if [ $? -eq 1 ] ; then
    > echo -n "Remove virus(es)? [y/n] "
    > read k
    > if [ $k = y ] ; then
    > clamscan -r -i --mbox --remove /home/charles
    > fi
    > fi
    > - ---------------------------------------
    >
    > - --
    > Charles Howse
    > Jackson, TN
    > Registered Linux User # 347576 (http://counter.li.org)
    > GnuPG ID - 1F5130A8
    > -----BEGIN PGP SIGNATURE-----
    > Version: GnuPG v1.2.3 (GNU/Linux)
    >
    > iD8DBQFA3+cD/S+VsB9RMKgRAq1eAKCL8NOV3qg17HweTSEUMdk1NbFHPQCeKgIi
    > 0RYS5K7PoreaQK6XwbZ7KIM=
    > =/TzR
    > -----END PGP SIGNATURE-----
    >
    >
    > --
    > fedora-list mailing list
    > fedora-list@redhat.com
    > To unsubscribe: http://www.redhat.com/mailman/listinfo/fedora-list
    >

                    
    __________________________________
    Do you Yahoo!?
    Yahoo! Mail - Helps protect you from nasty viruses.
    http://promotions.yahoo.com/new_mail 

    -- 
fedora-list mailing list
fedora-list@redhat.com
To unsubscribe: http://www.redhat.com/mailman/listinfo/fedora-list
  • Next message: Douglas Furlong: "[OT] CD boot disk for BIOS updates"