Tiny Core Linux

Tiny Core Extensions => TCE Talk => Extension requests => Topic started by: breakstuff on December 15, 2011, 05:44:11 PM

Title: Tinycore antivirus
Post by: breakstuff on December 15, 2011, 05:44:11 PM: One of the things I use live CDs for quite often is to perform virus scans on NTFS partitions. Has anyone had any luck installing AVG's Linux based CLI scanner or any others in TC (Bitdefender, Fprot, Vexira, etc.)? Is anyone working on an AV extension of any kind?
Title: Re: Tinycore antivirus
Post by: Jason W on December 15, 2011, 06:01:04 PM: I am not familiar with AVG on Linux, but Clamav is in the repo.
Title: Re: Tinycore antivirus
Post by: vinnie on December 15, 2011, 10:40:49 PM: Yes, i scanned ntfs partition with clamav and work fine:
1)install from repository
2)launch freshclam for update virus database
3)clamscan -r /mnt/partition -l /directory/for/log/file <--- This command scans the disk showing the output in the terminal, but also generates a log file where you can go and see, purged from all the rest, any infected files.
The infected file will not be deleted automatically, if you want check clamscan -h

I tested the program with 2 ntfs partitions, there were no viruses so I did the test with a fake virus and it worked

...and remember: wuuuuuuuuu!
Title: Re: Tinycore antivirus
Post by: Onyarian on December 16, 2011, 10:54:43 AM: If you want a basic gui for clamav:
http://forum.tinycorelinux.net/index.php/topic,6426.msg34053.html#msg34053 (http://forum.tinycorelinux.net/index.php/topic,6426.msg34053.html#msg34053)
Title: Re: Tinycore antivirus
Post by: breakstuff on December 16, 2011, 11:03:35 AM: I've used ClamAV CLI many times but didn't know it was in the repo, so thanks. ClamAV isn't my favorite, however. Sure would love to have fprot, vexira or AVG... I have the AVG CLI installed on my Fedora 15 laptop and like it very much...
Title: Re: Tinycore antivirus
Post by: bmarkus on December 16, 2011, 11:35:47 AM: CLAMAV is not the most sophisticated or most secure, but fairly good. I have used for years in production environment as part of spamassim to catch infected mails. Worked fine. Unfortunately all others are closed source programs, but I can understand why.

My favorite for home PC's is avast!, there is also a LINUX version. Worth to try.
Title: Re: Tinycore antivirus
Post by: breakstuff on December 16, 2011, 11:47:35 AM: So what do you think the chances are of getting one of these other AV's (besides Clam) to work in TC?
Title: Re: Tinycore antivirus
Post by: bmarkus on December 16, 2011, 02:47:28 PM: Quote from: breakstuff on December 16, 2011, 11:47:35 AM
So what do you think the chances are of getting one of these other AV's (besides Clam) to work in TC?

Just tried avast!, it works. Requires some system setting changes, but looks OK.
Title: Re: Tinycore antivirus
Post by: breakstuff on December 16, 2011, 03:03:25 PM: Cool! What type of system setting changes?
Title: Re: Tinycore antivirus
Post by: bmarkus on December 16, 2011, 03:12:13 PM: Quote from: breakstuff on December 16, 2011, 03:03:25 PM
Cool! What type of system setting changes?

When installed it works, but after online virus definition update you get an error message. It is discuused here:

http://forum.avast.com/index.php?topic=57764.0 (http://forum.avast.com/index.php?topic=57764.0)

You must increase shmmax:

Quote
do as root: sysctl -w kernel.shmmax=100000000

Exact figure may vary depending on system and I do not know wether this change conflicts with base or not. But try and ask Curaga's opinion.
Title: Re: Tinycore antivirus
Post by: curaga on December 16, 2011, 03:59:43 PM: Shouldn't matter, I don't think anything in the base uses SHM.