LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Security (https://www.linuxquestions.org/questions/linux-security-4/)
-   -   F-Prot (https://www.linuxquestions.org/questions/linux-security-4/f-prot-283498/)

webwolf70 01-28-2005 05:33 PM

F-Prot
 
First I know. There are few viruses that effect Linux so an anti-virus is really not needed. Well I got one anyways, lol. F-Prot. I have to say that I am very impressed with it. It is easy to update from the command line and easy to run. I am running a scan now and I am scanning everything in /, including my WIndows XP partition. I use spy-bot with XP and it archives dangers, etc, F-Prot pickedd up the possible risks(even though they are not risks,) and listed them. It also pointed out this in XP "/mnt/xp/Program Files/Common Files/Java/breg.cfg is a security risk named W32/Downloader.FE"

I like F-Prot. Lets see what else it picks up.

For those who see this post and are new here is how to run F-Prot. Open up your terminal, su and root password. To Update it type this

/usr/local/f-prot/tools/check-updates.pl

to scan type

f-prot /

if you want to scan specific files or directories type in that whole path for example

f-prot /usr/local/games/doom3

or the path to whatever you want to scan.

You can find a lot of info at their website and all over the internet including more commands.


Webwolf

joe83 01-29-2005 09:34 AM

I currently also use fprot and agree it's a great program.
I'm just curious about a couple of things:
With my distro (Slackware) I had to install perl module HTTP::Request
before updates.pl would work and typing fprot/ gives an error, I have to enter parameters such as di,auto,packed etc. for it to work properly. Did you install from source or an rpm package?
Maybe that's it???
Thanks.

nux9.0 02-13-2005 05:44 PM

Hello,joe83

Sorry for jumping on your post here but may i ask.
where did you find this "perl module HTTP::Request"

& how did you install it please as you can tell
newbie here

OPPs sorry this newbie is using Suse 9.0 Pro

Thank you

2damncommon 02-13-2005 07:30 PM

I agree F-Prot is a good product.
I had troubles installing the perl stuff so I just wget the updates.
I use it to check suspicious files. My first positive was when I asked someone to send me the virus their Windows system had picked up so I could test my antivirus.

nux9.0 02-13-2005 07:52 PM

Hello,2damncommon

First thanks for the reply but what is a wget ????

Thank you

Present 03-10-2005 10:07 PM

wget is an application that will download files over the internet for you. it provides multiple-downloading ability and recovery/resume abilities.

if you are looking for a graphical downloading program, you could try downloader for x abbreviated d4x

a quick google search should help you find any needed rpms (installation files for the programs, depending on your distro).

BROse 03-10-2005 10:15 PM

F-Prot is good, Myself I use Bitdefenders BDC. Free, Fast, CLI only, almost daily updates what more do you want in a program?

izquierdista 03-30-2005 10:14 PM

Bitdefenders antivirus
 
Quote:

F-Prot is good, Myself I use Bitdefenders BDC. Free, Fast, CLI only, almost daily updates what more do you want in a program?
I just downloaded and installed bitdefenders antivirus for linux when I try to use it I get the following error here is an example of a shell script:

jose@rn103188:~> bdc
BDC/Linux-Console v7.0 (build 2490) (i386) (Dec 10 2003 16:11:35)
Copyright (C) 1996-2003 SOFTWIN SRL. All rights reserved.

Usage: bdc path [parameters]
Parameters:
--files - scan files *
--arc - scan archives
--mail - scan mail databases
--nopack - don't scan packed programs
--nohed - unknown virus detection
--ext=ext1;ext2; - scan only this extensions
--log[=file] - create log file
--list - display all files
--all - scan all files
--append - append to log file
--disinfect - disinfect files
--delete - delete infected files
--copy - copy infected files in quarantine zone
--copys - move suspected files in quarantine zone
--move - move infected files in quarantine zone
--moves - move suspected files in quarantine zone
--info - information
--nowarn - display warnings
--vlist - display virus list
--debug - display debug information
--nor - do not recurse into subdirs
--alev[=n] - set maximum archive depth level
--flev[=n] - set maximum folder depth level
--update - update virus definitions
--help,--? - this help
* = default option

jose@rn103188:~> bdc path [--files]
BDC/Linux-Console v7.0 (build 2490) (i386) (Dec 10 2003 16:11:35)
Copyright (C) 1996-2003 SOFTWIN SRL. All rights reserved.

Error: Invalid path: '/home/jose/path'
Error: Invalid path: '/home/jose/[--files]'


Results:
Folders :0
Files :0
Packed :0
Infected files :0
Suspect files :0
Warnings :0
I/O errors :0

jose@rn103188:~>

I know I must be doing something wrong could you tell me step by step what to do so that I can use bdc antivirus correctly? I would really appreciate it.

I downloaded bdc after seeing your post
just so you know I have SUSE 9.1

webwolf70 03-30-2005 10:27 PM

I think I know what your problem is. You are typing "bdc path [--files]" Correct? Try and type in "bdc /" without the quotes of course. Or if you want to just scan your home folder then type in "bdc /home" without the quotes. See if that works. I haven't used Bit Defender in awhile but I think the commands are the same as they are with f-prot.


Webwolf

webwolf70 03-30-2005 10:31 PM

Quote:

Originally posted by joe83
I currently also use fprot and agree it's a great program.
I'm just curious about a couple of things:
With my distro (Slackware) I had to install perl module HTTP::Request
before updates.pl would work and typing fprot/ gives an error, I have to enter parameters such as di,auto,packed etc. for it to work properly. Did you install from source or an rpm package?
Maybe that's it???
Thanks.


Well how is this for a late reply, lol. The answer is I installed it from an RPM package. I believe it was with URPMI(Mandrake.) So it auto picked all that it needed from the hz lists.


Webwolf

izquierdista 03-31-2005 08:44 AM

f-prot
 
I finally got f-prot to work on my computer. when I run the command: f-prot /
on the shell script the program starts scanning my files but all of them say the following: (in use by another application)

here is a sample of a shell script:


jose@rn103188:~> f-prot /
Virus scanning report - 31 March 2005 @ 9:25

F-PROT ANTIVIRUS
Program version: 4.5.4
Engine version: 3.16.6

VIRUS SIGNATURE FILES
SIGN.DEF created 30 March 2005
SIGN2.DEF created 30 March 2005
MACRO.DEF created 30 March 2005

Search: /
Action: Report only
Files: "Dumb" scan of all files
Switches: -ARCHIVE -PACKED -SERVER

/etc/X11/.qtrc.lock Not scanned (in use by another application)
/etc/X11/.qt_plugins_3.3rc.lock Not scanned (in use by another application)
/etc/X11/.kstylerc.lock Not scanned (in use by another application)
/etc/opt/kde3/share/config/kdm/kdmrc Not scanned (in use by another application)
/etc/ppp/options.pptp Not scanned (in use by another application)
/etc/ppp/ioptions Not scanned (in use by another application)
/etc/ppp/peers/isdn/avm Not scanned (in use by another application)
/etc/ppp/peers/isdn/arcor Not scanned (in use by another application)
/etc/ppp/peers/isdn/otelo Not scanned (in use by another application)
/etc/ppp/peers/isdn/avm-ml Not scanned (in use by another application)
/etc/ppp/peers/isdn/leased Not scanned (in use by another application)
/etc/ppp/peers/isdn/talkline Not scanned (in use by another application)
/etc/ppp/peers/capi-isdn Not scanned (in use by another application)

could you tell me why it says this? Can I be working on something else ( ex. using the internet) while running f-prot ?

LinxNew 04-30-2005 11:04 AM

How can I setup a gui interface for F-prot ?
Is it a good thing, or it's the best from command line ?

A newbie question :

anti-virus in linux are always active ? If a download a virus from internet, f-prot tell me what can I do ?

Thanks for your cooperation :p

LinxNew 04-30-2005 12:07 PM

I'm trying to test f-prot, but after a while a must have turn off my laptop.

this is the command that I've used

f-prot /

some problem from some hdlist.cz (possible 'bomb'), but hen i see :

error from /etc/acpi/events my Mandriva block.


What's the problem ?

BROse 04-30-2005 02:47 PM

Front-end for fprot, look at google/linux for XFprot. Slick interface......

LinxNew 05-03-2005 09:53 AM

When I'm tring to install xfprot, I have found this error :

Running Linux Kernel: 2.6
Checking for xterm.....Not found
Checking for konsole.....OK
Package gtk+-2.0 was not found in the pkg-config search path.
Perhaps you should add the directory containing `gtk+-2.0.pc'
to the PKG_CONFIG_PATH environment variable
No package 'gtk+-2.0' found

I try to search this package throw' urpmi, but I don't find it.
Where I can download ?


All times are GMT -5. The time now is 06:31 PM.