virus.rst
changeset 1823 fb2ead263aed
child 1824 897d88b927bc
equal deleted inserted replaced
1821:c8c4218cc082 1823:fb2ead263aed
       
     1 .. -*- coding: utf-8 -*-
       
     2 
       
     3 =================================
       
     4  Computer viruses and rootckits.
       
     5 =================================
       
     6 
       
     7 Online virus scaner.
       
     8 ====================
       
     9 
       
    10  * http://virusscan.jotti.org/
       
    11  * http://www.virustotal.com/
       
    12  * http://virscan.org/
       
    13 
       
    14 Rootkit checker.
       
    15 ================
       
    16 
       
    17 For Debian::
       
    18 
       
    19   $ sudo apt-get install rkhunter chkrootkit
       
    20 
       
    21   $ sudo rkhunter -c
       
    22   ...
       
    23 
       
    24   $ sudo chkrootkit
       
    25   ...
       
    26 
       
    27 ..
       
    28 
       
    29   http://www.rootkit.nl/projects/rootkit_hunter.html
       
    30 
       
    31 Antivirus software.
       
    32 ===================
       
    33 
       
    34 Debian.
       
    35 -------
       
    36 
       
    37 ClamAV - anti-virus utility for Unix::
       
    38 
       
    39   $ sudo apt-get install clamav
       
    40 
       
    41 Windows.
       
    42 --------
       
    43 
       
    44 Free:
       
    45 
       
    46  * `Windows Defender
       
    47    <http://windows.microsoft.com/en-us/windows/using-defender>`_
       
    48  * `Avast <http://www.avast.com/>`_ - free Antivirus is free only for personal
       
    49    and non-commercial use.
       
    50  * `Dr.Web CureIt! <https://free.drweb.ru/cureit/>`_
       
    51  * `Free Kaspersky security scan for your PC
       
    52    <http://www.kaspersky.com/free-virus-scan>`_
       
    53  * `Kaspersky Virus Removal Tool <www.kaspersky.com/antivirus-removal-tool>`_
       
    54 
       
    55 Nod32 removal.
       
    56 ~~~~~~~~~~~~~~
       
    57 
       
    58 Disable nod32 services by 'msconfig' utility.
       
    59 
       
    60 Remove such keys from registry by 'regedit'::
       
    61 
       
    62   HKEY_LOCAL_MACHINE\SOFTWARE\ESET
       
    63   HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_NOD32DRV
       
    64   HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\eamon  ==>
       
    65                 ... easdrv easdrv EhttpSrv ekrn epfw Epfwndis epfwtdi
       
    66