hack proofing linux a Guide to Open Source Security phần 3

Bạn có thể tìm hiểu thêm về các sản phẩm chống virus hiện có tại ~ liên kết / security / . Trong bài viết này, trang web Packetstorm có một bộ sưu tập phong phú của các ứng dụng chống virus tại . | 112 Chapter 3 System Scanning and Probing You can learn more about the currently available antivirus products at link security of this writing the Packetstorm site has an extensive collection of antivirus applications at http viral-db avp-linux. Using AntiVir As with any other virus scanner AntiVir can do the following Check the system s boot record. Search directories and subdirectories. Automatically delete infected files. Save scans into a log file. Use an internal scheduler or an external scheduler such as at or cron. Scan NFS-mounted drives. Delete infected files. Move infected files to a central quarantine area of your own choosing. AntiVir scans the files you specify using its virus definition file which is located at usr lib AntiVir . Run without arguments AntiVir will scan only the current directory. For a more extensive scan you must specify arguments to change this default behavior. For example to have AntiVir scan the var log directory you would have to issue the following command antivir var log -s -allfiles -s -nolnk -r4 You can review all of the command-line options by issuing the antivir -h command which is handy when you have forgotten exactly how to use the program. Figure shows all of the command-line options available to you. Table lists some of the more relevant arguments to AntiVir. Table AntiVir Options Argument Description -allfiles Scans all files in the directory. -z Scans archived files. -onefs Scans only locally mounted drives does not scan NFS-mounted drives . Continued System Scanning and Probing Chapter 3 113 Table Continued Argument Description -del -r4 Removes infected files. Places AntiVir into verbose mode which means that you will be able to see extensive output. If you choose to save logs of the scan your logs will also contain this information. -ro Overwrites the existing log file. -ra -rf Appends new scan .