Ridding a Windows OS NTFS partition of a virus, if one is found from a linux AV app.?

Edward78

Edward78

Edward78

Soldato
Joined
19 Oct 2002
Posts
5,780
I got Avast for OpenSuSE 11.0 & did a scan of my Windows OS partition & it found one, but I was worried it would somehow mess windows up. The delete/move to chest box said it was the pagefile.sys file, just wondering if it would remove that whole file. Oh & can I set up Avast to have root privileges in my user account?
 
Last edited:
Oxy said:
Why do you have A/V on linux?

I wouldn't be running AV from linux on my windows HDD.

Why not boot into windows and virus scan from there?
Click to expand...

Avira Rescue CD boots a variation of Linux and will scan a hdd for viruses and attempts to repair/delete the files. So this would be similar using Avast and openSUSE.

@OP : If the virus has damaged key system files and the AV removes them you may as well reformat.
 
Oxy said:
Why do you have A/V on linux?

I wouldn't be running AV from linux on my windows HDD.

Why not boot into windows and virus scan from there?
Click to expand...

In case Windows can't be cleaned from windows.

Plus, a oddity Avast 5 did a boot up scan & it found nothing. Why did the linux version spot a virus?? It is Avast also, maybe Avast for windows doesn't scan some files?
 
Set windows to clear the page file out next time you shut down, then run the scanner in linux to see if it is still there. The "virus" in pagefile.sys might be just the 'memory dump' of a file that has the same signature.. if you get what I'm on about?
 
Just delete pagefile.sys from linux and reboot - Windows will recreate a clean one on startup. Simples! Probably a false positive but no harm done either way.
 
Last edited:
This is weird today it has found a new one in the same file

ksnap1.jpg
 
masterluke said:
did you delete the file before?
Click to expand...

No, it is odd how it was not the same one though. I am thinking they are false positives. Asked about deleting pagefile.sys on another forum & not even using it in windows xp, I have 2 gigs of ram, they freaked. They said, that I need it. Avast for windows found nothing on the boot up scan.
 
Its correct that you DO NOT want to run without a pagefile, but that isn't what I'm saying to do. When you delete it windows will create a new one transparantly. If you are worried then you could just rename to pagefile.backup or something so that if anything goes wrong you can put it back in.
 
Cool, I got the app. to run with root privileges, it asks me for pass. just like YaST2. :) :Hides under sheet to stop noobieness from showing:
 
Last edited:
You must log in or register to reply here.
Back
Top Bottom