Free antivirus scan with f prot 0.5 software for linux

AntiVirus Scanner is an anti-virus scanner for Endeavour Mark II that uses the ClamAV library (libclamav).

AntiVirus Scanner allows you to create a list of scan items for frequently scanned locations and features easy virus database updating, all in a simple GUI environment.

The Qmail virus scanner (QScan) is a mail filter for Qmail that scans incoming messages using the Sophos Antivirus engine, immediately rejecting infected content.

It is designed to be minimalistic, yet extremely fast and secure, and uses multiple pipes instead of the traditional temporary files and privilege separation. It works with non-native versions of the virus scanner like under OpenBSD with Linux or FreeBSD emulation.


You must create a temporary directory to extract MIME attachments, and replace Qmails original qmail-queue program with Qscan. Quick way to achieve this for the impatients :

mkdir /var/qmail/qscan
chmod 700 /var/qmail/qscan
chown qmaild:qmail /var/qmail/qscan
ln /var/qmail/bin/qmail-queue /var/qmail/bin/qmail-queue-old

Now, lets compile and install Qscan :

./configure --help

./configure [your beloved flags]

make install-strip

The last step is to replace the original qmail-queue program with our filter :

rm /var/qmail/bin/qmail-queue
ln -s /usr/local/sbin/qscan /var/qmail/bin/qmail-queue

Depending on your local configuration, it may be needed or not, but start with doing it :

chown qmaild:qmail /usr/local/sbin/qscan
chmod 6711 /usr/local/sbin/qscan

After testing, if everythings ok for you, remove the setuid bit :

chown 0:0 /usr/local/sbin/qscan
chmod 711 /usr/local/sbin/qscan

Visual F-Prot is an F-Prot Antivirus for Linux Workstations graphical interface.

Visual F-Prot is graphical interface for F-Prot Antivirus(TM) for Linux Workstations for home use (available for free download) copyrighted by Frisk Software International (www.firsk.is). Before you install this program, you must install F-Prot Antivirus, because it wont work without it.

It works with F-Prot antivirus version 4.5.3 and above - its not tested with earlier versions,but it should also work with them.

Also, youll need "xterm" terminal emulator, provided by most, if not all linux distributions.

This program is built with GTKMM 2.4 C++ libraries, so youll also need those for it to work.

Panda Antivirus for Linux is an antivirus for Linux servers and desktops. The project is an antivirus designed to be managed from the command line or console. To do this, an executable called PAVCL will be used.

The aim of Panda Antivirus for Linux is to scan and disinfect Windows and DOS workstations connected to a Linux server, as well as the Linux server itself.

Panda Antivirus for Linux scans files using both string searches and heuristic methods. The target files of the antivirus are Word documents, Java Applets, ActiveX controls and compressed files (ZIP, RAR, etc.).

At the moment, it does not scan the boot sector or the partitions table.

Panda Antivirus for Linux is a freeware version: Panda Software does not offer technical support for this software.

Yet Another antiVirus Recipe is a procmail that helps to filter out a lot of the most common e-mail worms.
For some of the above (plain iframe, clsid, xml, macro) e-mail is delivered normally but gets a WARNING in subject plus its old subject ($SUB).
Some of the warnings are:
WARNING-XML-CODEBASE-OBJECT-$SUB
WARNING-CLSID-EXTENSION-$SUB
WARNING-IFRAME-$SUB
WARNING-MACRO-$SUB
WARNING-NSCAM-SCORE:$NKNGS-$SUB
Main features:
- :: base64 signatures ::
- Most of these worms are MS-Windows executables and arrive at our e-mail encoded through base64 routines. YAVR uses especially selected signatures to locate these attachments. After that it places them in a directory (/virus/) sorted by name.
-
- :: iframe html exploit ::
- Through IFrame tag a html encoded e-mail can download and execute a file from a remote http site without informing the user.
-
- :: CLSID hidden extensions exploit ::
- Attachments which end with a Class ID (CLSID) file extension do not show the actual file extension saved and viewed with Windows Explorer. This allows dangerous file types to look as though they are actually innocent files, such as JPG or WAV files.
-
- :: xml codebase exploit ::
- Usage of some xml objects allow local files to be automatically executed, regardless of the security settings on the target machine.
-
- :: generic executable trap for bat, pif, vbs, vba, scr, lnk, com, exe ::
- The rest of MS-executable files that are not caught from base64 signatures end up in a virus-could-be file.
-
- :: generic macro detection for doc,dot,xls,xla files ::
- MS-Word and MS-Excel files that contain macro commands are marked with a warning.
-
- :: generic detection for most of nigeria scam e-mails (most of them) ::
- Nigeria scam e-mail is not a virus but a big spam problem... There are many good filters that use great algorithms for spam. This is just an add-on.
Enhancements:
- new switches for quarantine or not certain e-mailsbased on some ideas by Dan Smart
- YAVRQUARANTEXE if set to ON it sends unknown executables to /virus/virus-could-be as usual if set to OFF it delivers at inbox with a warning (and the X- header ;)
- YAVRQUARANTNIG same for nigeria scam
- YAVRQUARANTPRN same for porn e-mail read instuctions inside nkvir-rc
- X- marks in headers to help your own procmail scripts
- X-YAVR: MS-EXEC (any MS executable that wasnt identified by signatures)
- X-YAVR: NIGERIA (nigeria scam)
- X-YAVR: PORN (porn related)
- X-YAVR: MACRO (containing macro code)
- X-YAVR: XML-CODEBASE
- X-YAVR: IFRAME
- X-YAVR: CLSID-EXTENSION
- X-YAVR: SENDMAIL-EXPLOIT
- some more Worm.Moodown.b aka Netsky.b signatures
- another Mimail.Q

F-Prot GUI is a graphical user interface for great (and free for individual users) command line antivirus called F-Prot.
F-Prot GUI is a very simple script but not featureless, I hope it will be useful.
For home users using the Linux open-source operating system, we offer F-Prot Antivirus for Linux Workstations. F-Prot Antivirus for Linux Workstations utilizes the renowned F-Prot Antivirus scanning engine for primary scan but has in addition to that a system of internal heuristics devised to search for unknown viruses
F-Prot Antivirus for Linux was especially developed to effectively eradicate viruses threatening workstations running Linux. It provides full protection against macro viruses and other forms of malicious software - including Trojans.
Main features:
- Scans for over 314168 known viruses and their variants
- Ability to perform scheduled scans when used with the cron utility
- Scans hard drives, CD-ROMS, diskettes, network drives, directories and specific files
- Scans for images of boot sector viruses, macro viruses and Trojan Horses

Simple scAnning Tool is a simple and fast network scanner. Simple scAnning Tool is used to identify network devices and services. The identification is based on recieved data such as banners.

Usage:

sat.py [options] < file_name/ip_range >
sat.py -r [-f < file >]
sat.py -u [-o < host:port >]
sat.py -h

Options:

-i scan ip range, example: 10.1.1.1-10.1.1.2,10.1.2.2
[default]
-t scan targets from file
-n scan targets from file with nmap grepable output format
(nmap switch -oG)
-p < port_range > port range to scan, example: 1-1024,3333,4000-5000 [default
23]
-T scan TCP ports rather then UDP [default]
-U scan UDP ports rather then TCP
-4 scan via IPv4 rather than IPv6 [default]
-6 scan via IPv6 rather than IPv4
-H < number > maximum number of threads [default 100]
-O < file_name > set the output file name [default sat.log]
-V verbose scan mode
-c < file > specify the config file [default sat.conf]
-l < file > specify the srules file [default sat.srules]
-r restore aborted scan
-f < file > specify the restore file [default sat.restore]
-u update srules file from the net
-o < host:port > set the HTTP/FTP proxy for updater
-v show programs version number and exit
-h show this help message and exit