[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

Re: How to clean virus-infected files ?



Thanks Charles,

Your reply is useful, my only question here is if the "--remove" option of
clamscan will remove the virus or the file ? When I used F-Prot with the
"rename infected files" it renamed my "Inbox.mbox" file... so I would not
like to loose the file, but clean it ... I can hardly use my keyboard,
every key I press do print extra characters.... any help ?

Thanks a million,

Alberto

--- Charles Howse <chowse charter net> wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> On Sunday 27 June 2004 05:03 pm, Alberto M R Davila wrote:
> > Hello,
> >
> > I use FC1 and have the following clamav RPMs installed:
> >
> > clamav-0.73-1.1.fc1.dag
> > clamav-db-0.73-1.1.fc1.dag
> > clamav-milter-0.73-1.1.fc1.dag
> >
> > I use VmWare 4.0 where I have win98 as a "guest" system... My clamscan
> > tool detected the infected files listed below, how I should clean them
> ?
> > My keyboard is having a strange behaviour, typing more letters than
> the
> > ones I press... any tips ?
> 
> This bash script works fine for me to scan and remove (clean)...
> - ---------------------------------------
> #!/bin/bash
> 
> echo "Recursively scanning /root." 
> clamscan -r -i /root
> if [ $? -eq 1 ] ; then
> 	echo -n "Remove virus(es)? [y/n] "
> 	read i
> 		if [ $i = y ] ; then
> 			clamscan -r -i --remove /root	
> 		fi
> fi
> 
> echo 
> 
> echo "Recursively scanning /home/charles."
> clamscan -r -i --mbox /home/charles
> if [ $? -eq 1 ] ; then
> 	echo -n "Remove virus(es)? [y/n] "
> 	read k
> 		if [ $k = y ] ; then
> 			clamscan -r -i --mbox --remove /home/charles	
> 		fi
> fi
> - ---------------------------------------
> 
> - -- 
> Charles Howse
> Jackson, TN
> Registered Linux User # 347576 (http://counter.li.org)
> GnuPG ID - 1F5130A8
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.2.3 (GNU/Linux)
> 
> iD8DBQFA3+cD/S+VsB9RMKgRAq1eAKCL8NOV3qg17HweTSEUMdk1NbFHPQCeKgIi
> 0RYS5K7PoreaQK6XwbZ7KIM=
> =/TzR
> -----END PGP SIGNATURE-----
> 
> 
> -- 
> fedora-list mailing list
> fedora-list redhat com
> To unsubscribe: http://www.redhat.com/mailman/listinfo/fedora-list
> 



		
__________________________________
Do you Yahoo!?
Yahoo! Mail - Helps protect you from nasty viruses.
http://promotions.yahoo.com/new_mail




[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]