LinuxQuestions.org
Help answer threads with 0 replies.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 05-02-2004, 11:57 AM   #1
HeavyWeight
LQ Newbie
 
Registered: May 2004
Posts: 5

Rep: Reputation: 0
Linux to scan viruses on windows


Hi.

I am new to linux. I run the Fedora on my machine. I also have a copy of Knoppix-STD.

I have a friend who has a Windows XP laptop which has a virus. He let his Virus scan lapse.

I have checked on the Symantec website to find that the symptoms that he has are very common, such that there are 900+ viruses which it could be.

The main problem is that the laptop shuts itself off after about 60 seconds, so no Windows based scan would ever finsh completely.

Since I have a copy of this bootable version of linux, Knoppix STD I started thinking that perhaps I could utilize some bootable copy of Linux and then scan for/repair the virus? Is this known to be possible? It doesn't seem possible with the Knopper (Knoppix-std)


Heavyweight
 
Old 05-02-2004, 12:31 PM   #2
Capt_Caveman
Senior Member
 
Registered: Mar 2003
Distribution: Fedora
Posts: 3,658

Rep: Reputation: 69
Sure it is. Knoppix-std includes the ClamAV antivirus application. You can boot the laptop with the knoppix-std cdrom (you may have to set the laptop BIOS to boot from the CDROM drive). Then mount the windows drive and use clamAV to scan for viruses (probably a good idea to update the ClamAV virus definitions before-hand).
 
Old 05-02-2004, 12:37 PM   #3
HeavyWeight
LQ Newbie
 
Registered: May 2004
Posts: 5

Original Poster
Rep: Reputation: 0
Very nice indeed.

Nice! My listing of tools didn't seem to have that at first skim.

I guess the skimming was the problem.
 
Old 05-02-2004, 12:43 PM   #4
Capt_Caveman
Senior Member
 
Registered: Mar 2003
Distribution: Fedora
Posts: 3,658

Rep: Reputation: 69
No problem. Let us know how it turns out.
 
Old 05-05-2004, 12:29 PM   #5
cyph3r7
Member
 
Registered: Apr 2003
Location: Silicon Valley East, Northern Virginia
Distribution: FreeBSD,Debian, RH, ok well most of em...
Posts: 238

Rep: Reputation: 30
if it's just a simple virus like mydoom or whatever, boot into safe mode, run regedit and clean up whatever is trying to kick off in the "run" or "runonce"

then delete that file from the c: drive.

Symantec also has a boot floppy for this kinda virus....
 
Old 05-05-2004, 03:55 PM   #6
HeavyWeight
LQ Newbie
 
Registered: May 2004
Posts: 5

Original Poster
Rep: Reputation: 0
Hey guys

It turned out the virus was the Sasser. I was unable to connect to the web through windows because of this infection, however I used the Knoppix STD to my advantage so that I could connect to the symantec site and retrieve the fix. I placed the fix on a Thumb drive and booted back into windows and made the fix.

I also browbeat the victim into renewing the virus subscriptions.

Thank you for your input!
 
Old 05-24-2004, 07:40 PM   #7
aaronruss
Member
 
Registered: Mar 2004
Posts: 90

Rep: Reputation: 15
Sasser

Another trick you could do is Type Shutdown -i 9999 at the run line on windows and this should give you time to download patches before getting disconnected. Also setting the RPC services recovery to restart will help keep you connected.

Last edited by aaronruss; 05-24-2004 at 07:41 PM.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
In the future, will linux be as prone to viruses and spyware as windows? r3dhatter General 59 02-14-2006 05:39 PM
Using a linux PC to scan fro Viruses on windows box?? A6Quattro Linux - Security 7 07-21-2005 02:43 PM
Can Windows Viruses Affect My Linux Partitions? ixus_123 Linux - Security 11 12-19-2004 10:02 PM
Virus concerns: Can windows viruses affect linux, vice versa red118a Linux - Security 9 04-20-2004 04:59 AM
The Register: Linux Vs Windows Viruses XavierP Linux - Security 2 10-06-2003 08:05 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 12:43 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration