On 15 Nov 2006, at 15:59, Ivan Aleman wrote:
Indeed my intention is not to run the AV from Linux on an special
schedule, my intention is to disinfect one machine (or two maybe :) )
due that they are already infected, and the AV installed on them is
not doing the job. Of course I am aware that an on-access scanner is
the best solution but in my actual scenario the machines are already
'compromised' (they are configured to do on-access scanning, though)
then it occur to me that doing a disinfection from a Linux machine
over the LAN could be a good idea instead reformatting the machines,
that's what I started this thread and yes is not a good idea in the
sense that it is not very straight forward and even in a 1Gbit LAN is
going to be slow, of course what you mention in another mail about
that using smbfs and ClamAV will possible not scan all the files due
to locks and etc. but still this can work in some cases, it is just
another tool/method against these kind of problems.
While I know it isn't the answer to your question specifically but
why not use an application like Stinger.exe from a RO USB-Key or
Floppy Disk? Another solution (if this computer can access the
internet) is to use an online scan like http://
housecall.trendmicro.com, I have found it to be a helpful check.
All of that said, in our company we have a policy that states that if
a computer is infected with a virus it can never be trusted again. I
know that it is extreme but why take the risk for one computer? I
would recommend taking the machine offline as soon as possible and
reinstalling the OS. Think of it has house cleaning :)
.myke
----------------------------------------------------------------------------
ALERT: "How a Hacker Launches a SQL Injection Attack!" - White Paper
It's as simple as placing additional SQL commands into a Web Form input box
giving hackers complete access to all your backend systems!
https://download.spidynamics.com/1/ad/sql.asp?Campaign_ID=70160000000CZWl
----------------------------------------------------------------------------
