How to clean virus-infected files ?
Alberto M R Davila
amrdavila at yahoo.com
Mon Jun 28 10:46:58 UTC 2004
Thanks Charles,
Your reply is useful, my only question here is if the "--remove" option of
clamscan will remove the virus or the file ? When I used F-Prot with the
"rename infected files" it renamed my "Inbox.mbox" file... so I would not
like to loose the file, but clean it ... I can hardly use my keyboard,
every key I press do print extra characters.... any help ?
Thanks a million,
Alberto
--- Charles Howse <chowse at charter.net> wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> On Sunday 27 June 2004 05:03 pm, Alberto M R Davila wrote:
> > Hello,
> >
> > I use FC1 and have the following clamav RPMs installed:
> >
> > clamav-0.73-1.1.fc1.dag
> > clamav-db-0.73-1.1.fc1.dag
> > clamav-milter-0.73-1.1.fc1.dag
> >
> > I use VmWare 4.0 where I have win98 as a "guest" system... My clamscan
> > tool detected the infected files listed below, how I should clean them
> ?
> > My keyboard is having a strange behaviour, typing more letters than
> the
> > ones I press... any tips ?
>
> This bash script works fine for me to scan and remove (clean)...
> - ---------------------------------------
> #!/bin/bash
>
> echo "Recursively scanning /root."
> clamscan -r -i /root
> if [ $? -eq 1 ] ; then
> echo -n "Remove virus(es)? [y/n] "
> read i
> if [ $i = y ] ; then
> clamscan -r -i --remove /root
> fi
> fi
>
> echo
>
> echo "Recursively scanning /home/charles."
> clamscan -r -i --mbox /home/charles
> if [ $? -eq 1 ] ; then
> echo -n "Remove virus(es)? [y/n] "
> read k
> if [ $k = y ] ; then
> clamscan -r -i --mbox --remove /home/charles
> fi
> fi
> - ---------------------------------------
>
> - --
> Charles Howse
> Jackson, TN
> Registered Linux User # 347576 (http://counter.li.org)
> GnuPG ID - 1F5130A8
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.2.3 (GNU/Linux)
>
> iD8DBQFA3+cD/S+VsB9RMKgRAq1eAKCL8NOV3qg17HweTSEUMdk1NbFHPQCeKgIi
> 0RYS5K7PoreaQK6XwbZ7KIM=
> =/TzR
> -----END PGP SIGNATURE-----
>
>
> --
> fedora-list mailing list
> fedora-list at redhat.com
> To unsubscribe: http://www.redhat.com/mailman/listinfo/fedora-list
>
__________________________________
Do you Yahoo!?
Yahoo! Mail - Helps protect you from nasty viruses.
http://promotions.yahoo.com/new_mail
More information about the fedora-list
mailing list