[clamav-users] Malware in an Icedove profile of mine cannot be located

2015-08-18 Thread amenex
After working out a good method of accessing multiple Icedove profiles, combining multitudes of emails into one grand file system, and then finding one nasty little email that insinuates itself into any folder into which I move found emails, I'm finding that I cannot get rid of the payload t

Re: [clamav-users] Fwd: Unable to detect pdf virus

2015-08-18 Thread P K
Hi Guys, Again troubling you. Can you please let me know why same virus is not detected for windows server. Do i need to enable any setting in ClamAv configuration? md5sum exploit.pdf a3e8a7602797c69f6320225e8137d063 exploit.pdf I was trying same exploit.pdf virus file (CVE-2009-4324) to uploa

[clamav-users] Scanning Win32 Volumes

2015-08-18 Thread J
I haven't been able to find this answer in the archives. Can I scan WinXP archive drives for malware with ClamAV running on my Ubuntu laptop and find any viruses, bots, or whatever? With ClamAV, I'll just have to delete the infected files, correct? No cleaning? J

Re: [clamav-users] Scanning Win32 Volumes

2015-08-18 Thread Al Varnell
On Aug 18, 2015, at 12:18 PM, J wrote: > I haven't been able to find this answer in the archives. > Can I scan WinXP archive drives for malware with ClamAV running on my Ubuntu > laptop and find any viruses, bots, or whatever? As long as your OS has the appropriate drivers for that drive, Cla

Re: [clamav-users] Scanning Win32 Volumes

2015-08-18 Thread Benny Pedersen
J skrev den 2015-08-18 21:18: I haven't been able to find this answer in the archives. Can I scan WinXP archive drives for malware with ClamAV running on my Ubuntu laptop and find any viruses, bots, or whatever? With ClamAV, I'll just have to delete the infected files, correct? No cleaning?

Re: [clamav-users] Scanning Win32 Volumes

2015-08-18 Thread Shane Hollis
The process to do that is: I'm assuming your Windows XP folder / partition is /dev/sdb1 if it is different substitute the location in the examples below. to find its location try sudo fdisk -l<--- thats an L - lowercase Also if the WinXP partition was unmounted uncleanly you might need

Re: [clamav-users] Scanning Win32 Volumes

2015-08-18 Thread Shane Hollis
Further to that - you don't need to remove stuff by hand - your two options are: |Removal of viruses: clamscan -r -i --remove /mnt/WinXP <- removes all files found as infected permanently - dont use that with detect-pua options as that sometimes throws false positives. Quarantine of viruses: |

Re: [clamav-users] Scanning Win32 Volumes

2015-08-18 Thread Al Varnell
I know the ClamAV folks recommend extreme caution when using that option. I think the OP was referring to being able to remove infection from a file when they referred to “Cleaning” which ClamAV cannot do. -Al- On Tue, Aug 18, 2015 at 02:56 PM, Shane Hollis wrote: > > There is a remotve optio