Re: How to - Scan a Windows machine for virus from a Linux machine

On 15 Nov 2006, at 15:59, Ivan Aleman wrote:
> Indeed my intention is not to run the AV from Linux on an special
> schedule, my intention is to disinfect one machine (or two maybe :) )
> due that they are already infected, and the AV installed on them is
> not doing the job. Of course I am aware that an on-access scanner is
> the best solution but in my actual scenario the machines are already
> 'compromised' (they are configured to do on-access scanning, though)
> then it occur to me that doing a disinfection from a Linux machine
> over the LAN could be a good idea instead reformatting the machines,
> that's what I started this thread and yes is not a good idea in the
> sense that it is not very straight forward and even in a 1Gbit LAN is
> going to be slow, of course what you mention in another mail about
> that using smbfs and ClamAV will possible not scan all the files due
> to locks and etc. but still this can work in some cases, it is just
> another tool/method against these kind of problems.
While I know it isn't the answer to your question specifically but  
why not use an application like Stinger.exe from a RO USB-Key or  
Floppy Disk?  Another solution (if this computer can access the  
internet) is to use an online scan like http:// 
housecall.trendmicro.com, I have found it to be a helpful check.

All of that said, in our company we have a policy that states that if  
a computer is infected with a virus it can never be trusted again.  I  
know that it is extreme but why take the risk for one computer?  I  
would recommend taking the machine offline as soon as possible and  
reinstalling the OS.  Think of it has house cleaning :)

.myke



----------------------------------------------------------------------------
ALERT: "How a Hacker Launches a SQL Injection Attack!" - White Paper
It's as simple as placing additional SQL commands into a Web Form input box giving hackers complete access to all your backend systems!

https://download.spidynamics.com/1/ad/sql.asp?Campaign_ID=70160000000CZWl
----------------------------------------------------------------------------