Tell me more ×
IT Security Stack Exchange is a question and answer site for IT security professionals. It's 100% free, no registration required.
up vote 4 down vote favorite

Is there a way to scan the entire drive including auto-run and all partitions, including the master boot record (MBR)?

share|improve this question

2 Answers

up vote 1 down vote accepted

It seems like that cannot be done with ClamAV. See the comments on this site. Definitions are missing for such viruses as well I don't see the patch applied to the clamav I have installed.

share|improve this answer
up vote 2 down vote

Go to where it is mounted (presumably /media/) and run clamscan like you normally would (-r). (Or you wouldn't have to go where it is if you want to use the -i flag)

share|improve this answer
But there could be a virus in the mbr, and your method will not check for that. – Lucy Brennan Feb 11 '12 at 18:10
If you did get a virus in your mbr you can just rebuild it and that will get rid of at least a few I know of that will infect it. – doyler Feb 11 '12 at 18:39
I don't know if there is a virus in the mbr, but I want to find out. Not just rebuild. Thanks, though. – Lucy Brennan Feb 12 '12 at 12:08
You can see if the total system memory is seemingly missing bytes to check if your mbr has been corrupted - support.microsoft.com/kb/82923 – doyler Feb 12 '12 at 17:43

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.