(Oct 08, 2021, 11:28 am)ill88eagle Wrote: There are a bunch of linux antivirus live distros designed and maintained for the purpose of fixing winrot. Create a bootable live usb / cd, boot from it and run the AV scan. It's easily the best option as most malware/virus depends on the win-system running and/or are in the boot sector. A quick google came up with this: https://www.fosslinux.com/4594/create-a-...use-it.htm
The problem with ClamAv, is well .... ClamAv.
I've tested, stored, collected boogers and their AV software for over a generation.
Though not so much lately.
Historically three came up to the very bottom of reliability:
McAfee. M$, and ClamAv.
Toss a booger up tp Virustotal, and see how it fares (Though I believe M$AV is long gone).
The problem I have with AV programs is that they want to act as daemons, which is a no-no here.
All software should come when called and leave. And I do not want their crap making any decisions about what to do with 'positives' - which can include system perl scripts!
The Emsisoft I use is scripted and tediously slow, mainly used for downloads when I feel the needs.
I may try Avast for a system scan but would like beforehand to know if there any potential pronlems with this korporate kreation.
BTW - In the old days at least there were three AV at the top: Kaspersky, Thunderbird, and F-Prot.
(Oct 10, 2021, 14:48 pm)RobertX Wrote: I use AVAST as well, but just the free version.
As for firewalls, I use Zonealarm.
The thing about Zonealarm is that an offline installer pops up randomly, but it's there if you check it frequently.
Is there a command line version scanner for Avast?
There is only one booger since Windows 3.0 that has caused me to reformat a Win system. It was ZoneAlarm. Started giving problems, and when I tried to remove it, it totally putzed my system. Been on my shitlist since.
I use PC Tools Firewall. A decent firewall, with all the right options. Except one:
It absolutely insists on blocking or messing with my VPN connections.
I've tried whitelisting OpenVPN as well as any obvious stuff, but connections keep dropping, and without a warning box.
So I turn it off when on the VPN. Which is just about always.
Addendum:
I wonder id there are any hacker type projects that permit transderring signature files from one scanner to another?
The ideal would be Kaspersky sig database onto ClamAv.