Mercurial Mercurial > tips / annotate
summary | shortlog | changelog | graph | tags | bookmarks | branches | files | changeset | file | latest | revisions | annotate | diff | comparison | raw | help
Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
virus.rst
author Oleksandr Gavenko <gavenkoa@gmail.com>
Wed, 05 Aug 2015 23:55:34 +0300
changeset 1729 22ffd80639c0
parent 703 8860b7ae6253
permissions -rw-r--r--
Make centered content design with adoption for mobile devices. Highlight TOC.
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
119
a35784f89969 Added list of rootkit searching programm.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
diff changeset 
     1
 
-*- mode: outline; coding: utf-8 -*-
a35784f89969 Added list of rootkit searching programm.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
diff changeset 
     2
 












a35784f89969
Added list of rootkit searching programm.



Oleksandr Gavenko <gavenkoa@gmail.com>


parents: 

diff
changeset




     3


* Rootkit.













a35784f89969
Added list of rootkit searching programm.



Oleksandr Gavenko <gavenkoa@gmail.com>


parents: 

diff
changeset




     4














a35784f89969
Added list of rootkit searching programm.



Oleksandr Gavenko <gavenkoa@gmail.com>


parents: 

diff
changeset




     5


** Debian.













a35784f89969
Added list of rootkit searching programm.



Oleksandr Gavenko <gavenkoa@gmail.com>


parents: 

diff
changeset




     6














a35784f89969
Added list of rootkit searching programm.



Oleksandr Gavenko <gavenkoa@gmail.com>


parents: 

diff
changeset




     7


  $ sudo apt-get install rkhunter chkrootkit













a35784f89969
Added list of rootkit searching programm.



Oleksandr Gavenko <gavenkoa@gmail.com>


parents: 

diff
changeset




     8














a35784f89969
Added list of rootkit searching programm.



Oleksandr Gavenko <gavenkoa@gmail.com>


parents: 

diff
changeset




     9


*** rkhunter.













a35784f89969
Added list of rootkit searching programm.



Oleksandr Gavenko <gavenkoa@gmail.com>


parents: 

diff
changeset




    10














a35784f89969
Added list of rootkit searching programm.



Oleksandr Gavenko <gavenkoa@gmail.com>


parents: 

diff
changeset




    11


  $ sudo rkhunter -c













a35784f89969
Added list of rootkit searching programm.



Oleksandr Gavenko <gavenkoa@gmail.com>


parents: 

diff
changeset




    12


...













a35784f89969
Added list of rootkit searching programm.



Oleksandr Gavenko <gavenkoa@gmail.com>


parents: 

diff
changeset




    13









120






4cc04042bf86
Added url.



Oleksandr Gavenko <gavenkoa@gmail.com>


parents: 
119

diff
changeset




    14


  http://www.rootkit.nl/projects/rootkit_hunter.html













4cc04042bf86
Added url.



Oleksandr Gavenko <gavenkoa@gmail.com>


parents: 
119

diff
changeset




    15









119






a35784f89969
Added list of rootkit searching programm.



Oleksandr Gavenko <gavenkoa@gmail.com>


parents: 

diff
changeset




    16


***













a35784f89969
Added list of rootkit searching programm.



Oleksandr Gavenko <gavenkoa@gmail.com>


parents: 

diff
changeset




    17














a35784f89969
Added list of rootkit searching programm.



Oleksandr Gavenko <gavenkoa@gmail.com>


parents: 

diff
changeset




    18


  $ sudo chkrootkit













a35784f89969
Added list of rootkit searching programm.



Oleksandr Gavenko <gavenkoa@gmail.com>


parents: 

diff
changeset




    19


...








121






4d651112fdca
About ClamAV.



Oleksandr Gavenko <gavenkoa@gmail.com>


parents: 
120

diff
changeset




    20









602






fc01fedc5b17
Microsoft Security Essentials.



Oleksandr Gavenko <gavenkoa@gmail.com>


parents: 
466

diff
changeset




    21


* Debian.








121






4d651112fdca
About ClamAV.



Oleksandr Gavenko <gavenkoa@gmail.com>


parents: 
120

diff
changeset




    22









602






fc01fedc5b17
Microsoft Security Essentials.



Oleksandr Gavenko <gavenkoa@gmail.com>


parents: 
466

diff
changeset




    23


** ClamAV.








121






4d651112fdca
About ClamAV.



Oleksandr Gavenko <gavenkoa@gmail.com>


parents: 
120

diff
changeset




    24














4d651112fdca
About ClamAV.



Oleksandr Gavenko <gavenkoa@gmail.com>


parents: 
120

diff
changeset




    25


anti-virus utility for Unix.













4d651112fdca
About ClamAV.



Oleksandr Gavenko <gavenkoa@gmail.com>


parents: 
120

diff
changeset




    26














4d651112fdca
About ClamAV.



Oleksandr Gavenko <gavenkoa@gmail.com>


parents: 
120

diff
changeset




    27


  $ sudo apt-get install clamav








466






2c0786a63050
Nod32 removal.



Oleksandr Gavenko <gavenkoa@gmail.com>


parents: 
121

diff
changeset




    28









602






fc01fedc5b17
Microsoft Security Essentials.



Oleksandr Gavenko <gavenkoa@gmail.com>


parents: 
466

diff
changeset




    29


* Windows.













fc01fedc5b17
Microsoft Security Essentials.



Oleksandr Gavenko <gavenkoa@gmail.com>


parents: 
466

diff
changeset




    30














fc01fedc5b17
Microsoft Security Essentials.



Oleksandr Gavenko <gavenkoa@gmail.com>


parents: 
466

diff
changeset




    31


** Free.













fc01fedc5b17
Microsoft Security Essentials.



Oleksandr Gavenko <gavenkoa@gmail.com>


parents: 
466

diff
changeset




    32














fc01fedc5b17
Microsoft Security Essentials.



Oleksandr Gavenko <gavenkoa@gmail.com>


parents: 
466

diff
changeset




    33


*** Microsoft Security Essentials.













fc01fedc5b17
Microsoft Security Essentials.



Oleksandr Gavenko <gavenkoa@gmail.com>


parents: 
466

diff
changeset




    34














fc01fedc5b17
Microsoft Security Essentials.



Oleksandr Gavenko <gavenkoa@gmail.com>


parents: 
466

diff
changeset




    35


  http://en.wikipedia.org/wiki/Microsoft_Security_Essentials













fc01fedc5b17
Microsoft Security Essentials.



Oleksandr Gavenko <gavenkoa@gmail.com>


parents: 
466

diff
changeset




    36









703






8860b7ae6253
Avast and AVG.



Oleksandr Gavenko <gavenkoa@gmail.com>


parents: 
602

diff
changeset




    37


*** Avast.













8860b7ae6253
Avast and AVG.



Oleksandr Gavenko <gavenkoa@gmail.com>


parents: 
602

diff
changeset




    38














8860b7ae6253
Avast and AVG.



Oleksandr Gavenko <gavenkoa@gmail.com>


parents: 
602

diff
changeset




    39


Free Antivirus is free only for personal and non-commercial use.













8860b7ae6253
Avast and AVG.



Oleksandr Gavenko <gavenkoa@gmail.com>


parents: 
602

diff
changeset




    40














8860b7ae6253
Avast and AVG.



Oleksandr Gavenko <gavenkoa@gmail.com>


parents: 
602

diff
changeset




    41


  http://www.avast.com/













8860b7ae6253
Avast and AVG.



Oleksandr Gavenko <gavenkoa@gmail.com>


parents: 
602

diff
changeset




    42














8860b7ae6253
Avast and AVG.



Oleksandr Gavenko <gavenkoa@gmail.com>


parents: 
602

diff
changeset




    43


*** AVG.













8860b7ae6253
Avast and AVG.



Oleksandr Gavenko <gavenkoa@gmail.com>


parents: 
602

diff
changeset




    44














8860b7ae6253
Avast and AVG.



Oleksandr Gavenko <gavenkoa@gmail.com>


parents: 
602

diff
changeset




    45


30-free trial.













8860b7ae6253
Avast and AVG.



Oleksandr Gavenko <gavenkoa@gmail.com>


parents: 
602

diff
changeset




    46














8860b7ae6253
Avast and AVG.



Oleksandr Gavenko <gavenkoa@gmail.com>


parents: 
602

diff
changeset




    47


  http://free.avg.com/ww-en/download-free-trial













8860b7ae6253
Avast and AVG.



Oleksandr Gavenko <gavenkoa@gmail.com>


parents: 
602

diff
changeset




    48









602






fc01fedc5b17
Microsoft Security Essentials.



Oleksandr Gavenko <gavenkoa@gmail.com>


parents: 
466

diff
changeset




    49


** Non free.








466






2c0786a63050
Nod32 removal.



Oleksandr Gavenko <gavenkoa@gmail.com>


parents: 
121

diff
changeset




    50














2c0786a63050
Nod32 removal.



Oleksandr Gavenko <gavenkoa@gmail.com>


parents: 
121

diff
changeset




    51


*** Nod32.













2c0786a63050
Nod32 removal.



Oleksandr Gavenko <gavenkoa@gmail.com>


parents: 
121

diff
changeset




    52














2c0786a63050
Nod32 removal.



Oleksandr Gavenko <gavenkoa@gmail.com>


parents: 
121

diff
changeset




    53


**** Nod32 removal.













2c0786a63050
Nod32 removal.



Oleksandr Gavenko <gavenkoa@gmail.com>


parents: 
121

diff
changeset




    54














2c0786a63050
Nod32 removal.



Oleksandr Gavenko <gavenkoa@gmail.com>


parents: 
121

diff
changeset




    55


Disable nod32 services by 'msconfig' utility.













2c0786a63050
Nod32 removal.



Oleksandr Gavenko <gavenkoa@gmail.com>


parents: 
121

diff
changeset




    56














2c0786a63050
Nod32 removal.



Oleksandr Gavenko <gavenkoa@gmail.com>


parents: 
121

diff
changeset




    57


Remove such keys from registry by 'regedit':













2c0786a63050
Nod32 removal.



Oleksandr Gavenko <gavenkoa@gmail.com>


parents: 
121

diff
changeset




    58














2c0786a63050
Nod32 removal.



Oleksandr Gavenko <gavenkoa@gmail.com>


parents: 
121

diff
changeset




    59


  HKEY_LOCAL_MACHINE\SOFTWARE\ESET













2c0786a63050
Nod32 removal.



Oleksandr Gavenko <gavenkoa@gmail.com>


parents: 
121

diff
changeset




    60


  HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_NOD32DRV













2c0786a63050
Nod32 removal.



Oleksandr Gavenko <gavenkoa@gmail.com>


parents: 
121

diff
changeset




    61


  HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\eamon  ==>













2c0786a63050
Nod32 removal.



Oleksandr Gavenko <gavenkoa@gmail.com>


parents: 
121

diff
changeset




    62


                ... easdrv easdrv EhttpSrv ekrn epfw Epfwndis epfwtdi













2c0786a63050
Nod32 removal.



Oleksandr Gavenko <gavenkoa@gmail.com>


parents: 
121

diff
changeset




    63














2c0786a63050
Nod32 removal.



Oleksandr Gavenko <gavenkoa@gmail.com>


parents: 
121

diff
changeset




    64


* Free online virus scaner.













2c0786a63050
Nod32 removal.



Oleksandr Gavenko <gavenkoa@gmail.com>


parents: 
121

diff
changeset




    65














2c0786a63050
Nod32 removal.



Oleksandr Gavenko <gavenkoa@gmail.com>


parents: 
121

diff
changeset




    66


  http://virscan.org













2c0786a63050
Nod32 removal.



Oleksandr Gavenko <gavenkoa@gmail.com>


parents: 
121

diff
changeset




    67


  http://virusscan.jotti.org/ru













2c0786a63050
Nod32 removal.



Oleksandr Gavenko <gavenkoa@gmail.com>


parents: 
121

diff
changeset




    68


  http://www.virustotal.com














tips