How can I perform a virus scan of my Windows install from Linux?

badp

Earlier today, I noticed that Windows Defender was acting up. It was disabled and, once re-enabled and tasked with a quick scan, it would error out with some Windows License Expired error code or something.

Since that's nonsense, I think that the best thing I can do is shut Windows down and run a virus scan from a clean copy of Linux.

How can I go about to sanely do that?

badp

Here's a low-sanity approach that has the advantage of not installing resident protection on Linux in the process:

  1. Install clamav from whatever software packaging solution your distribution uses. For Ubuntu:

    apt-get install clamav
    
  2. Mount and locate the Windows partition. If you use Ubuntu, open the Home folder and pick the relevant partition from the Devices list. From the Go menu, pick Location. The address bar turns into an editable field. Copy the contents of this field into the clipboard.

  3. Open two windows of the terminal (yes - don't worry).

  4. In one, type cd, paste in the mount point (right click, paste or ctrl-shift-v), hit enter. When that's done, run this:

    clamscan -ir .
    

    -r instructs clamscan to search subdirectories. -i instructs clamscan not to drown the seven lines about infected files into four hundred thousand lines about OK files (happens).

    However, that gives you no progress information, so let's fix that.

  5. In the latter console window, or in a new tab, or something, paste in the following incantation in order to see what file is currently being scanned:

    watch "lsof -Fn -p `pidof clamscan` | grep ^n\/[^tpdul] | cut -c1 --complement | tail -n1"
    

    WTF is that? Basically: watch tells the system to run the command in quotes every few seconds. The command in quotes is split by the |s in a few parts. The first gets us the list of files clamscan has opened and a few other things. The second cuts the other things out (including irrelevant files in /tmp, /proc, /dev, /usr, /lib). The third cleans up. The fourth only shows you the file opened the latest. Don't worry about it too much.

  6. Take the results with a grain of salt. ClamAV seems to prefer reporting infections when in doubt. virscan.org is a thing that exists.

  7. Google the name of the viruses and take action.

Collected from the Internet

Please contact [email protected] to delete if infringement.

edited at
0

Comments

0 comments
Login to comment

Related

From Dev

How can I do a virus scan on a Linux CD or ISO from windows?

From Dev

How can I do an Automatic Shut Down after a Windows Defender Virus Scan? Would the Task Scheduler be involved?

From Dev

Can I install Linux without a disk and remove my Windows completely?

From Dev

How can I copy my git repository from my windows machine to a linux machine via usb drive?

From Dev

Did I install a virus on my Ubuntu?

From Dev

Can a windows virus downloaded in linux be transferred to windows?

From Dev

Which Linux can I install from Windows? (but not Ubuntu)

From Dev

Can I install a dualboot and start the windows boot from linux terminal?

From Dev

Which Linux can I install from Windows? (but not Ubuntu)

From Dev

Can I install a dualboot and start the windows boot from linux terminal?

From Dev

How can I install a Linux distribution to my DVD-RW?

From Dev

How can I install 4 VMs on my Windows 7 PC?

From Dev

How can I install Windows 7 without dvd or usb, on linux?

From Dev

How can I install nodejs manually in Linux from terminal

From Dev

How do I access my Windows administrative share from Linux?

From Dev

How do I share internet with Windows from my Linux box?

From Dev

How can I remotely control a linux box from my Mac?

From Dev

How can I hide my IP from linux who command

From Dev

How can I compute the size of my Linux install + all my applications?

From Dev

How can I track down a destructive virus?

From Dev

How can I share my internet connection from windows to ubuntu?

From Dev

How can I stop windows from using my Internet

From Dev

How can I block access to my Windows partition from Ubuntu?

From Dev

How can I unbind Windows 10 license from my computer?

From Dev

How can I "move" Windows Media Player from my Windows 7 laptop to my Windows 8.1 laptop?

From Dev

How can i compress this into an EXE without it being seen as a virus? its an updater for my game :/

From Dev

How can I get Windows Media Center on my Windows 8 Enterprise install?

From Dev

Can I install Linux from the same HDD?

From Dev

How can I recover Windows/Linux dualboot after install Linux Mint?

Related Related

  1. 1

    How can I do a virus scan on a Linux CD or ISO from windows?

  2. 2

    How can I do an Automatic Shut Down after a Windows Defender Virus Scan? Would the Task Scheduler be involved?

  3. 3

    Can I install Linux without a disk and remove my Windows completely?

  4. 4

    How can I copy my git repository from my windows machine to a linux machine via usb drive?

  5. 5

    Did I install a virus on my Ubuntu?

  6. 6

    Can a windows virus downloaded in linux be transferred to windows?

  7. 7

    Which Linux can I install from Windows? (but not Ubuntu)

  8. 8

    Can I install a dualboot and start the windows boot from linux terminal?

  9. 9

    Which Linux can I install from Windows? (but not Ubuntu)

  10. 10

    Can I install a dualboot and start the windows boot from linux terminal?

  11. 11

    How can I install a Linux distribution to my DVD-RW?

  12. 12

    How can I install 4 VMs on my Windows 7 PC?

  13. 13

    How can I install Windows 7 without dvd or usb, on linux?

  14. 14

    How can I install nodejs manually in Linux from terminal

  15. 15

    How do I access my Windows administrative share from Linux?

  16. 16

    How do I share internet with Windows from my Linux box?

  17. 17

    How can I remotely control a linux box from my Mac?

  18. 18

    How can I hide my IP from linux who command

  19. 19

    How can I compute the size of my Linux install + all my applications?

  20. 20

    How can I track down a destructive virus?

  21. 21

    How can I share my internet connection from windows to ubuntu?

  22. 22

    How can I stop windows from using my Internet

  23. 23

    How can I block access to my Windows partition from Ubuntu?

  24. 24

    How can I unbind Windows 10 license from my computer?

  25. 25

    How can I "move" Windows Media Player from my Windows 7 laptop to my Windows 8.1 laptop?

  26. 26

    How can i compress this into an EXE without it being seen as a virus? its an updater for my game :/

  27. 27

    How can I get Windows Media Center on my Windows 8 Enterprise install?

  28. 28

    Can I install Linux from the same HDD?

  29. 29

    How can I recover Windows/Linux dualboot after install Linux Mint?

HotTag

Archive