Antivirus Scan with F-Prot is a simple servicemenu for konqueror that allows to scan single or multiple files and folders using the F-Prot Antivirus. Antivirus Scan with F-Prot shows the result of the scanning in a textbox using kdialog. It can also show the progress of the scanning in a terminal.

I hope you may find it useful.

Comments or/and translations are welcome.

TO INSTALL: extract the content of the tarball and copy the file f-prot_virus_scan.desktop into ~/.kde/share/apps/konqueror/servicemenus (just for your user) or in /usr/share/apps/konqueror/servicemenus, /opt/kde/share/apps/konqueror/servicemenus... etc, depending on your distro, to make it system-wide.

This is only the service-menu, you need to have F-Prot antivirus installed on your system.

Whats New in This Release:

· Added Danish translation by Kefeus

Visual F-Prot is an F-Prot Antivirus for Linux Workstations graphical interface.

Visual F-Prot is graphical interface for F-Prot Antivirus(TM) for Linux Workstations for home use (available for free download) copyrighted by Frisk Software International (www.firsk.is). Before you install this program, you must install F-Prot Antivirus, because it wont work without it.

It works with F-Prot antivirus version 4.5.3 and above - its not tested with earlier versions,but it should also work with them.

Also, youll need "xterm" terminal emulator, provided by most, if not all linux distributions.

This program is built with GTKMM 2.4 C++ libraries, so youll also need those for it to work.

F-Prot Antivirus security software package has various components that help keep your system secure from viruses, backdoors, trojans and other malicious programs. The project includes the RealTime Protector, a memory-resident monitoring utility that observes all files accessed on your system, a Scheduler where you can set the Scanner to make automatic scans or updates on your system at any time and an Updater to manage all signature updates.

For home users using the Linux open-source operating system, we offer F-Prot Antivirus for Linux Workstations. F-Prot Antivirus for Linux Workstations utilizes the renowned F-Prot Antivirus scanning engine for primary scan but has in addition to that a system of internal heuristics devised to search for unknown viruses

F-Prot Antivirus for Linux was especially developed to effectively eradicate viruses threatening workstations running Linux. It provides full protection against macro viruses and other forms of malicious software - including Trojans.

Here are some key features of "F Prot Antivirus for Linux Workstations":

· Scans for over 191534 known viruses and their variants
· Ability to perform scheduled scans when used with the cron utility
· Scans hard drives, CD-ROMS, diskettes, network drives, directories and specific files
· Scans for images of boot sector viruses, macro viruses and Trojan Horses

F-Prot Antivirus for Linux Workstations is FREE for use by personal users on personal workstations

F-Prot GUI is a graphical user interface for great (and free for individual users) command line antivirus called F-Prot.

F-Prot GUI is a very simple script but not featureless, I hope it will be useful.

For home users using the Linux open-source operating system, we offer F-Prot Antivirus for Linux Workstations. F-Prot Antivirus for Linux Workstations utilizes the renowned F-Prot Antivirus scanning engine for primary scan but has in addition to that a system of internal heuristics devised to search for unknown viruses

F-Prot Antivirus for Linux was especially developed to effectively eradicate viruses threatening workstations running Linux. It provides full protection against macro viruses and other forms of malicious software - including Trojans.

Here are some key features of "F Prot GUI":

· Scans for over 314168 known viruses and their variants
· Ability to perform scheduled scans when used with the cron utility
· Scans hard drives, CD-ROMS, diskettes, network drives, directories and specific files
· Scans for images of boot sector viruses, macro viruses and Trojan Horses

t-prot (TOFU Protection) is a filter which improves the readability of email messages and Usenet posts by hiding some of their annoying parts.

The annoyances it handles include mailing list footers, signatures, TOFU, sequences of blank lines, and repeated punctuation.

TOFU is an acronym that stands for "Text oben, Fullquote unten", a German reference to the practice of adding just a few lines of original text and quoting a complete message below them.

Whats New in This Release:

· A new option was added to skip processing of very large and time-consuming messages.

AntiVirus Scanner is an anti-virus scanner for Endeavour Mark II that uses the ClamAV library (libclamav).

AntiVirus Scanner allows you to create a list of scan items for frequently scanned locations and features easy virus database updating, all in a simple GUI environment.

f-IDE is a development environment for C++.

f-IDE project provides powerful editing, code intelligence, and search capabilities that reduce development time.

Whats New in This Release:

· A bug with starting development on an application has been fixed.

F-IRC provides a console IRC client.

F-IRC is an IRC client for the console. It supports multiple servers, scrollback, and all the basic features one can expect from an IRC client.

When F-IRC is started, youll see a list of channels and servers on the right.

The box around these is inverted. That means that if you use the left- and the
right cursor, they will work on the channels etc. If you press ^n, the box will
no longer be inverted and you can use the cursor keys for editting what youre typing.

If the channel-box is selected, press key right on a channel to get a list of
people in that channel. Press key left to exit this (and return to the list of
channels) or press key right on a name to get a menu via which you can kick
and ban people as well as get information on them. Press left on a server to
hide all the channels for that server, press right to unhide all channels.

Press cursor right on a channel to enter that channel. If theres a star in
front of channelname, someone wrote something in that channel. Press ^w to
jump directly to the next channel in which someone wrote something.

Whats New in This Release:

· The cursor is finally visible in the edit-line.
· The program now runs on 64-bit platforms as well.

F-Spot project is an application designed to provide personal photo management to the GNOME desktop.

Here are some key features of "F Spot":

· import
· export
· printing
· advanced sorting of digital images.

Yet Another antiVirus Recipe is a procmail that helps to filter out a lot of the most common e-mail worms.

For some of the above (plain iframe, clsid, xml, macro) e-mail is delivered normally but gets a WARNING in subject plus its old subject ($SUB).

Some of the warnings are:
WARNING-XML-CODEBASE-OBJECT-$SUB
WARNING-CLSID-EXTENSION-$SUB
WARNING-IFRAME-$SUB
WARNING-MACRO-$SUB
WARNING-NSCAM-SCORE:$NKNGS-$SUB


Here are some key features of "YetAnotherantiVirusRecipe":

· :: base64 signatures ::
· Most of these worms are MS-Windows executables and arrive at our e-mail encoded through base64 routines. YAVR uses especially selected signatures to locate these attachments. After that it places them in a directory (/virus/) sorted by name.
·
· :: iframe html exploit ::
· Through IFrame tag a html encoded e-mail can download and execute a file from a remote http site without informing the user.
·
· :: CLSID hidden extensions exploit ::
· Attachments which end with a Class ID (CLSID) file extension do not show the actual file extension saved and viewed with Windows Explorer. This allows dangerous file types to look as though they are actually innocent files, such as JPG or WAV files.
·
· :: xml codebase exploit ::
· Usage of some xml objects allow local files to be automatically executed, regardless of the security settings on the target machine.
·
· :: generic executable trap for bat, pif, vbs, vba, scr, lnk, com, exe ::
· The rest of MS-executable files that are not caught from base64 signatures end up in a virus-could-be file.
·
· :: generic macro detection for doc,dot,xls,xla files ::
· MS-Word and MS-Excel files that contain macro commands are marked with a warning.
·
· :: generic detection for most of nigeria scam e-mails (most of them) ::
· Nigeria scam e-mail is not a virus but a big spam problem... There are many good filters that use great algorithms for spam. This is just an add-on.



Whats New in This Release:

· new switches for quarantine or not certain e-mailsbased on some ideas by Dan Smart
· YAVRQUARANTEXE if set to ON it sends unknown executables to /virus/virus-could-be as usual if set to OFF it delivers at inbox with a warning (and the X- header ;)
· YAVRQUARANTNIG same for nigeria scam
· YAVRQUARANTPRN same for porn e-mail read instuctions inside nkvir-rc
· X- marks in headers to help your own procmail scripts
· X-YAVR: MS-EXEC (any MS executable that wasnt identified by signatures)
· X-YAVR: NIGERIA (nigeria scam)
· X-YAVR: PORN (porn related)
· X-YAVR: MACRO (containing macro code)
· X-YAVR: XML-CODEBASE
· X-YAVR: IFRAME
· X-YAVR: CLSID-EXTENSION
· X-YAVR: SENDMAIL-EXPLOIT
· some more Worm.Moodown.b aka Netsky.b signatures
· another Mimail.Q

F Modular Synthesizer (FMS) is basically a tool to generate all kinds of sounds. It should work on any up-to-date Linux system.

Here are some key features of "F Modular Synthesizer":

Playing sounds

· with any frequency and volume
· one after another or at the same time (mixer) or both
· stereo (different sounds on different channels)
· with any balance between the two channels
· with built-in sweep that even follows frequency modulation
· like speech synthesis [listen]
· both on-the-fly playing with direct user access and asynchronous, pre-computed output; also combining the two, taking the best of both
· with all modulation options described below

Making noise

· now although it tends to get noisy in any way, we mean real noise here
· in 4 different ways
· nearly-white noise
· narrow band noise

Modulating

· amplitude (volume)
· frequency
· minima, maxima, amplitude and frequency of the modulation (here the "Fully Modular" comes to existence)
· balance, moving the sound from left to right and back in stereo mode
· narrowness of the noise frequency band in many different ways

Making music

· some-kind-of-midi-mapping mode (sound + envelope => instrument, FMS midi file format)
· auto-converter and player for MUS file format, listen [here] (Musplay)
· auto-composer for those who like a rather modern kind of music
· chords

Displaying

· spectrum of a sound
· oscillogram of a sound
· mixes between different sounds with different volumes / frequencies

Saving

· sounds as oscillograms in FMS file format (mathematical description, not complete wavetables)
· sounds as Fourier overtone amplitudes
· music in FMS midi format
· FMS output in wave format
· wave file sounds in FMS file format (auto-converter) - experimental

GUI

· a somewhat ugly and extremely limited tcl/tk gui
· FROCOR, an installation that connects the FMS sound backend to graphical interfaces and outputs
· a fully modular Qt GUI - experimental, but Ill give you a [screenshot]

Whats New in This Release:

· This release fixes all bugs discovered via user feedback, and should be quite stable.
· Sweep frequency modulation is now implemented, and using both blur and frequency modulation on the same sound at the same time is possible.

samba-vscan provides on-access scanning of Samba shares with ClamAV (clamd and libclamav), F-Secure AV, FRISK F-Prot Daemon, Kaspersky AntiVirus, OpenAntiVirus.org ScannerDaemon, mks AntiVirus, NAI/McAfee VirusScan, Sophos Sweep (via Sophie), Symantec AntiVirus Engine (via ICAP), and Trend Micro (via Trophie). It supports Samba 2.2.x/3.0.x.

samba-vscan currently is made of ten Samba VFS modules:

vscan-fprotd - for use with F-Prot Daemon
vscan-icap - for use with an ICAP anti-virus service, currently only Symantec AntiVirus Engine 4.x is supported (this is alpha code and not yet for production environment!)
vscan-kavp - for use with Kaspersky AntiVirus (kavdaemon) via Kaspersky KAV client C library. vscan-kavp is a stripped-down version from vscan-kavp of Ries van Twisk). For the full-featured version please see http://www.rvt.dds.nl
vscan-mks - for use with mks32 via mks_vir Daemon
vscan-oav - for use with OpenAntiVirus.org ScannerDaemon
vscan-sophos - for use with Sophos Sweep via Sophie (http://www.vanja.com/tools)
vscan-trend - for use with Trend Micro FileScanner / InterScan VirusWall via Trophie (http://www.vanja.com/tools)
vscan-clamav - for use with Clam AntiVirus Daemon (clamd) or libclamav (http://www.clamav.net)
vscan-nai - for use with NAI/McAfee uvscan
vsan-fsav - for use with F-Secure AntiVirus (daemon)
vscan-symantec - for use with Symantec Anti Virus Engine Note: the vscan-symantec odule will statically linked against the symantec library. This lib is not covered by GPL and the resulting vscan-symantec VFS module may infringe the GPL of Samba! Due this reason, the vscan-symantec module will only be build if --with-symantec flag is used for ./configure

Whats New in This Release:

· NEW, VERSION, ChangeLog: updated
· icap/vscan-icap.c: bugfix
· Released samba-vscan 0.3.6b
·

FIRE is a portable bootable cdrom based distribution with the goal of providing an immediate environment to perform forensic analysis, incident response, data recovery, virus scanning and vulnerability assessment.

Also provides necessary tools for live forensics/analysis on win32, sparc solaris and x86 linux hosts just by mounting the cdrom and using trusted static binaries available in /statbins.

Here are some key features of "FIRE":

Forensics workstation/Data Recovery

· Instantly deploy a forensics workstation with tct, tctutils, mac-robber, and autopsy also provides perl 5.6.1 compiled with Large File Support.

Live System Incident Response

· Binaries are available for Incident Response on a live machine.

Virus Scanning

· Utilizing F-Prot 3.11beta http://www.f-prot.com you can scan for virii, worms, trojans, and all around harmful code.
· Just mount the filesystems that you want to scan and execute f-prot .
· Any filesystem you can mount, you can scan. mount and scan fat/ntfs/ext2/ext3/reiserfs partitions
· Scan your windows machines offline for virii that may not be detected with an "after the fact" anti-virus
· software installation.

Pen-Testing Platform

· I should NOT have to explain this portion: If the tools you would like to use are not in the distribution please make a request!

Trinity Rescue Kit or TRK is a 100% free CD bootable Linux distribution aimed specifically at offline operations for Windows and Linux systems such as rescue, repair, password resets and cloning, with the ability to update itself.

It has custom tools to easily recover data such as deleted files, clone Windows installations over the network, perform antivirus sweeps with 2 different antivirus products, reset windows passwords, read AND write on NTFS partitions, edit
partition layout and much much more.

Trinity Rescue Kit 3.1 is the evolved version of 3.0 and a complete rewrite of version 1.1 and the unfinished 2.0. It s mostly based on Mandrake 10.2 (Mandriva 2005) binaries and heavily adapted startup scripts.

What s new since 3.0?

· self update capability: TRK now has a script that will download/search all non-GPL
licensed software, like the Microsoft ntfs
drivers or F-prot. It will also update antivirus definitions for F-prot and Clamav.
Afterwards, it will recreate itself as a new iso
file which you can burn again to CD
· new version of captive-ntfs, using the latest XP SP2 drivers and LUFS
· clamav 0.88-1
· mkisofs, cdrecord, pico, cfdisk
· eject CD (was bug in build 204) and powerdown on halt

What s new since 1.1 (and 2.0):

· more hardware support:
kernel 2.6.14.3 with most default options left on, so all important hardware like
disc controllers and network cards are supported, even SATA disks, USB storage and gigabit ethernet. Also patched with lufs (for ntfs support) and bootsplash (background graphics)
· better network capability: besides all common network client tools, you can also run a secure shell server for remote access or TRK to TRK file copies
· run completely from memory: provided you have at least 192Mb of ram, you can run TRK from memory and eject the CD once it has booted, giving you the ability to mount other CDs
· vesa framebuffer support: TRK now has limited graphical support thanks to kernel
builtin framebuffer support.
· qtparted: the famous PQMagic clone. Partition editing never been this easy thanks to the graphical interface this tool uses (via framebuffer)
· configure your LAN to be "TRK 3 compliant": you can change the way a TRK behaves by adding an otherwise unused parameter to your DHCP server to point to a webserver where you keep specific configuration data for your TRK such as proxy settings or complete scripts with which you can do anything you want
· run scripts from a local computer by searching for /.trk/trklocal.conf
· full NTFS write support thanks to the captive ntfs project by Jan Kratochvil.
· more NTFS write support with the NTFS Fuse driver.
· Secure Shell server: let a user boot from TRK, enter a new password for root and
connect to TRK remotely

Featuring home brewed scripts, new and improved:

· updatetrk (since 3.1): updates TRK with ntfs drivers, F-prot + definitions and
Clamav definitions. When the script is run without arguments, it looks for a Windows pagefile.sys, creates a loopback filesystem on it and creates TRK from there. Afterwards it copies the new isofile to C: emp, from where you can burn it to CD again
· clonexp: script that uses ntfsclone to perform copies of ntfs filesystems between
two computers each running their copy of Trinity Rescue Kit 3.1. One PC copies his Windows installation over the network to another PC running a TRK 3.1 with a secure shell server enabled. An easy way to clone Windows installations or recover as much as you can from a dying disk. Run it either interactively or from a single commandline
· winpass: does the same thing as in TRK 1.1, searches for all local Windows
installations, runs chntpw on your SAM file and resets the password. It now also handles Windows on FAT32 correctly and uses the safe ntfs driver from the Linux kernel, so it works even without captive support
· regedit: is actually the same as winpass, but starts chntpw in interactive mode and allows you to edit a Windows registry
· virusscan: completely rewritten,this script now has two different engines: the default is to run with the GNU Clamav antivirus which is free for everyone. This is a very good scanner, but the drawback is that it can only detect virus infected files, not clean them. So the only option is to delete them, where most of the time the file is the complete virus. But just to be sure we don t delete anything valuable, a quarantined backup is being made first. The other part of the script uses the free-for-home-users F-prot. F-prot itself is not included in TRK but it gets downloaded from their site. F-prot DOES have the ability to disinfect files if necessary.
· ntfsundeleteall: also completely rewritten, ntfsundeleteall, a wrapper for
ntfsundelete now recovers deleted files from an NTFS volume but it gives you the ability to add a recoverability percentage to the commandline. Since it only recovers files and not directories, sometimes you would have double filenames. This has been countered by adding the inode of the file at the beginning of the filename, so recoverability is 100% within the possibilities of ntfsundelete

More utils:

· links: simple webbrowser which runs in framebuffer graphical mode. Handy to go and read some reference docs on the Internet
· ftp and lftp
· ssh and scp
· ms-sys: This program is used to create Microsoft compatible boot records. It is able to do the same as Microsoft "fdisk /mbr" to a hard disk. It is also able to do the same as Microsoft "sys d:" to a floppy or FAT partition except that it does not copy any system files, only the boot record is written.
· Reiserfs tools
· ext2/ext3 tools
· ntfsprogs
· dosfs tools
· tcpdump, nmap and netcat
· mdadm for offline raid configuration
· burn, a utility that stresses your CPU
· samba client: mount windows shares over the network
· shred: erase a harddisk until its unrecoverable even by magnetic resonance recovery
· fatback: undelete files from fat filesystems
· TestDisk: Tool to check and undelete partition, works with most common partitions
· PhotoRec: File and pictures recovery. PhotoRec has been created to recover pictures from digital camera memory and it has been extended to recover lost files from harddisk (List of known files). PhotoRec is safe to use, it will never attempt to write to the drive or memory support you are about to recover from. Recovered files are instead written in the directory from where you are running the PhotoRec program.
· pico text editor
· mkisofs and cdrecord
· perl 5

Whats New in This Release:

· Very extensive and complete documentation.
· 2 more virus scan engines: Grisoft AVG and BitDefender.
· ntfs-3g has full and fast read/write support for NTFS drives.
· Bootable from a USB stick and over PXE.
· An integrated Samba file server.
· LVM support.
· Kernel 2.6.19.2 and hwdata 0.191-1.
· Menu-based graphical startup.
· Tools to migrate TRK from CD to USB and back to an ISO file if desired.
· Bridging capabilities.
· Full proxy server support: a script called "setproxy" can prompt you for your networks proxy parameters, allowing you to access the internet and update your TRK.