ClamAV - Revision history

Woozle: freshclam; ArchLinux Wiki

2015-03-23T20:47:44Z

freshclam; ArchLinux Wiki

← Older revision		Revision as of 20:47, 23 March 2015
Line 12:		Line 12:
	* Boot the liveCD		* Boot the liveCD
	* Install the "clamav" package		* Install the "clamav" package
	* Mount the infected drive (opening it from "Locations" will do)		* Run "freshclam" (this may sit for a few minutes before showing any signs of life, and will take many minutes to finish downloading).
			* Mount the infected drive (opening it from "Locations" in a [[file manager]] will do)
	* run '''df''' to find out the drive's filesystem path. We'll assume it's <u>/media/disk</u>.		* run '''df''' to find out the drive's filesystem path. We'll assume it's <u>/media/disk</u>.
	* Run clamscan in read-only mode to see if there are any detectable infections:		* Run clamscan in read-only mode to see if there are any detectable infections:
	** clamscan -v -r /media/disk		** <code>clamscan -v -r /media/disk</code>
	* To move infected files into a quarantine area (only partially tested):		* To move infected files into a quarantine area (only partially tested):
	** sudo clamscan -v -r --move=/media/disk/quarantine /media/disk		** sudo clamscan -v -r --move=/media/disk/quarantine /media/disk
Line 37:		Line 38:
	===Reference===		===Reference===
	* {{wikipedia\|Clam AntiVirus}}		* {{wikipedia\|Clam AntiVirus}}
			* [https://wiki.archlinux.org/index.php/ClamAV ArchLinux Wiki]
	===Official===		===Official===
	* [[URL::http://www.clamav.net/\|ClamAV]]		* [[URL::http://www.clamav.net/\|ClamAV]]
	* [http://www.clamwin.com/ ClamWin]		* [http://www.clamwin.com/ ClamWin]

Woozle: added links from Will Hill; tidied up how-to a bit; SMW

2013-03-22T00:48:34Z

added links from Will Hill; tidied up how-to a bit; SMW

← Older revision		Revision as of 00:48, 22 March 2013
Line 1:		Line 1:
			<hide>
			[[page type::article]]
			[[thing type::software]]
			[[purpose::antivirus]]
			[[license::open-source]]
	[[category:software]]		[[category:software]]
			</hide>
	==About==		==About==
	[[ClamAV]] is [[free, open-source]] [[anti-virus]] software for [[Linux]], [[Microsoft Windows\|Windows]], and many other [[operating system]]s.		[[ClamAV]] is [[free, open-source]] [[anti-virus]] software for [[Linux]], [[Microsoft Windows\|Windows]], and many other [[operating system]]s.
	==~~Notes~~==		==How To==
	To disinfect a Windows PC by running ClamAV from an [[Ubuntu]] [[liveCD]]:		To disinfect a Windows PC by running ClamAV from an [[Ubuntu]] [[liveCD]]:
	* Boot the liveCD		* Boot the liveCD
Line 12:		Line 18:
	* To move infected files into a quarantine area (only partially tested):		* To move infected files into a quarantine area (only partially tested):
	** sudo clamscan -v -r --move=/media/disk/quarantine /media/disk		** sudo clamscan -v -r --move=/media/disk/quarantine /media/disk
	** real-world example:		** real-world example -- this should quarantine the infections in addition to finding them:
	*** sudo clamscan -v -r --move=/media/IBM_PRELOAD/etc/quarantine /media/IBM_PRELOAD		*** sudo clamscan -v -r --move=/media/IBM_PRELOAD/etc/quarantine /media/IBM_PRELOAD
	* ''to be written: what to do if infections are found.''		* If no infections found, you may still be able to find infections with one of the Windows versions; there may be a way to force the Linux version to use the very latest data engine, but I'm not sure. Hopefully this basic scan will be enough to make a hopelessly virus-bound system usable again.
	** Basically, you'll probably want to set up a folder for quarantining infected files, and then run clamscan with the option to move infected files there.		===Notes===
	* If no infections found, you may still be able to find infections with one of the Windows versions; there may be a way to force the Linux version to use the very latest data engine, but I'm not sure.		Additionally, there are some distributions which come with ClamAV already installed, and which may therefore simplify this process:
			* http://distrowatch.com/weekly.php?issue=20100322
			* http://distrowatch.com/?newsid=06435
			* http://www.eugenemdavis.com/scanning-windows-folders-ubuntu-livecd
			* [http://antiviruslivecd.4mlinux.com/ AVLive CD distro]

	==Windows==		==Windows==
Line 28:		Line 38:
	* {{wikipedia\|Clam AntiVirus}}		* {{wikipedia\|Clam AntiVirus}}
	===Official===		===Official===
	* [http://www.clamav.net/ ClamAV]		* [[URL::http://www.clamav.net/\|ClamAV]]
	* [http://www.clamwin.com/ ClamWin]		* [http://www.clamwin.com/ ClamWin]

Woozle: /* Notes */ link to liveCD page

2013-03-22T00:42:14Z

Notes: link to liveCD page

← Older revision		Revision as of 00:42, 22 March 2013
Line 3:		Line 3:
	[[ClamAV]] is [[free, open-source]] [[anti-virus]] software for [[Linux]], [[Microsoft Windows\|Windows]], and many other [[operating system]]s.		[[ClamAV]] is [[free, open-source]] [[anti-virus]] software for [[Linux]], [[Microsoft Windows\|Windows]], and many other [[operating system]]s.
	==Notes==		==Notes==
	To disinfect a Windows PC by running ClamAV from an [[Ubuntu]] liveCD:		To disinfect a Windows PC by running ClamAV from an [[Ubuntu]] [[liveCD]]:
	* Boot the liveCD		* Boot the liveCD
	* Install the "clamav" package		* Install the "clamav" package
Line 17:		Line 17:
	** Basically, you'll probably want to set up a folder for quarantining infected files, and then run clamscan with the option to move infected files there.		** Basically, you'll probably want to set up a folder for quarantining infected files, and then run clamscan with the option to move infected files there.
	* If no infections found, you may still be able to find infections with one of the Windows versions; there may be a way to force the Linux version to use the very latest data engine, but I'm not sure.		* If no infections found, you may still be able to find infections with one of the Windows versions; there may be a way to force the Linux version to use the very latest data engine, but I'm not sure.

	==Windows==		==Windows==
	In [[Microsoft Windows]], ClamAV is available in two varieties:		In [[Microsoft Windows]], ClamAV is available in two varieties:

Woozle: tentative command for quarantining

2012-06-14T13:02:19Z

tentative command for quarantining

← Older revision		Revision as of 13:02, 14 June 2012
Line 10:		Line 10:
	* Run clamscan in read-only mode to see if there are any detectable infections:		* Run clamscan in read-only mode to see if there are any detectable infections:
	** clamscan -v -r /media/disk		** clamscan -v -r /media/disk
			* To move infected files into a quarantine area (only partially tested):
			** sudo clamscan -v -r --move=/media/disk/quarantine /media/disk
			** real-world example:
			*** sudo clamscan -v -r --move=/media/IBM_PRELOAD/etc/quarantine /media/IBM_PRELOAD
	* ''to be written: what to do if infections are found.''		* ''to be written: what to do if infections are found.''
	** Basically, you'll probably want to set up a folder for quarantining infected files, and then run clamscan with the option to move infected files there.		** Basically, you'll probably want to set up a folder for quarantining infected files, and then run clamscan with the option to move infected files there.

Woozle: Created page with "category:software ==About== ClamAV is free, open-source anti-virus software for Linux, Windows, and many other operating systems. ==..."

2011-03-20T13:14:41Z

Created page with "category:software ==About== ClamAV is free, open-source anti-virus software for Linux, Windows, and many other operating systems. ==..."

New page

[[category:software]]
==About==
[[ClamAV]] is [[free, open-source]] [[anti-virus]] software for [[Linux]], [[Microsoft Windows|Windows]], and many other [[operating system]]s.
==Notes==
To disinfect a Windows PC by running ClamAV from an [[Ubuntu]] liveCD:
* Boot the liveCD
* Install the "clamav" package
* Mount the infected drive (opening it from "Locations" will do)
* run '''df''' to find out the drive's filesystem path. We'll assume it's <u>/media/disk</u>.
* Run clamscan in read-only mode to see if there are any detectable infections:
** clamscan -v -r /media/disk
* ''to be written: what to do if infections are found.''
** Basically, you'll probably want to set up a folder for quarantining infected files, and then run clamscan with the option to move infected files there.
* If no infections found, you may still be able to find infections with one of the Windows versions; there may be a way to force the Linux version to use the very latest data engine, but I'm not sure.
==Windows==
In [[Microsoft Windows]], ClamAV is available in two varieties:
* [[ClamWin]] ([http://www.clamwin.com/ home page])
* [[Immunet]], formerly "ClamAV for Windows" and "ClamAV™ powered by Immunet"
==Error Codes==
* [[Failed to install runtime with error code 1601]] - ClamAV for Windows can't be installed in "safe mode", despite the obvious advantage of being able to do this with an anti-virus program.
==Links==
===Reference===
* {{wikipedia|Clam AntiVirus}}
===Official===
* [http://www.clamav.net/ ClamAV]
* [http://www.clamwin.com/ ClamWin]