full-disclosure - antivirus and spyware scanning

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

From: davefd at davewking.com (Dave King)
Subject: antivirus and spyware scanning

I've looked at several bootable Linux cd's and haven't found one to 
remove Window's spyware.   BartPE ( http://www.nu2.nu/pebuilder/ ) is a 
Windows XP/2003 based bootable CD that will allow you to run Adaware.  
The one limitation seems to be that  it won't  scan the  registry on the 
Windows installation on the hard drive.  If you haven't checked it out, 
BartPE is really a cool project that basically lets you master your own 
cd  to your own liking.  It has a pretty large comunity backing and you 
who make all sorts of addins.  You can, for example, add virus scanning 
to your BartPE cd as well.

You may also be able to get Adaware, or some similar program, to run 
using WINE on a Knoppix based distro like Auditor Security Collection or 
Knoppix-STD.

Good  Luck,
Dave King
http://www.thesecure.net

Lee Leahu wrote:

>Hello Everyone,
>
>I recently came across a linux based live-cd designed for virus scanning, disaster recover, network analysis, etc.
>
>http://www.inside-security.de/insert_en.html
>
>I think it is very useful to scan a windows machine from viruses while having that machine booted to linux.  This pretty much ensures that you will find all the virii on that system.
>
>Does anyone know of a spyware scanner that can also work from within Linux?  I dis-like the idea of having to boot to windows just to scan the box for spyware.  One could argue that the harddrive could be put into another machine and scanned there, but what if your in an environment where that is just not possible (making housecalls, no unused machine, etc)?
>
>Also, if you know of a better solution that this, I am always interested.
>
>Thanks
>
>  
>