I found an alternative to using clamscan from knoppix, it requires an internet connection in this tutorial. For downloading Antivir.
1. With knoppix as your boot cd or dvd, Boot from CD/DVD.
2. At knoppix splash screen hit
3. Open a terminal window.Code:boot:<ENTER>
4. Get root/admin rights.
4a. Change directories.Code:sudo su<ENTER>
(I ommitted the above step, seems to work also)Code:cd /temp<ENTER>
5. Download Antivir.
6. Extract the downloaded tar file.Code:wget http://dl1.avgate.net/down/unix/packages/antivir-workstation-pers.tar.gz<ENTER>
7. Change directory.Code:tar xvpzf antivir-workstation-pers.tar.gz<ENTER>
To find this just scroll up to the downloaded process, version number should be visible. Tack this inplace of the parenthesis comment.Code:cd antivir-workstation-(whatever version # it is)
8. Install.
The period before the slash is important.Code:./install<ENTER>
9. Update Antivir.
10. Identify ntfs device.Code:antivir --update<ENTER>
Look for ntfs. You should see something like," /dev/hda1 /media/hda1" in the same line. My ntfs was sda1.Code:cat /etc/fstab<ENTER>
11. Mount ntfs drive.
If it works, your hard drive light will blink, showing you that you can access it.Code:ntfs-3g /dev/(your device) /media/(your device)<ENTER>
If not you may have to right clik the hard drive on the desktop an uncheck read only under properties. (I think.)
12. Choose scanning method.
The -ren will rename what it finds without deleting it, replacing the original extention with .xxx.Code:antivir -lang=EN -rfmalware.txt -r1 --allfiles --alltypes --scan-in-mbox -s -z -onefs -ren /media/(your device)/<ENTER>
The -rf will write a log to the file specified, in this case malware.txt. You can e-mail it to yourself before rebooting.
When you boot back into windows just search for .xxx and submit to Virus Total or Jotti.
13. When done, unmount ntfs.
14. RebootCode:umount /media/(your device)<ENTER>
This concludes the Scanning for Viruses with Knoppix on Windows NTFS Volumes using Antivir.
The original information can be found at the following address:
http://www.castlecops.com/postx185079-0-0.html post #9
If anyone has a method for any other anti-virus vendors, please document each action, as above, and post.
Sophos supports linux, Panda supports linux.
Please include if it does or does not use rename option.
I hope this helps,
Condor
SAS - HGST Ultrastar 7K4000 HUS724040ALA640 0F14688 3.5" 4TB 7.2K RPM 64MB HDD
$19.99
HITACHI HUS724040ALA640 4TB 7200RPM 64MB SATA 6.0Gb/s 3.5" HARD DRIVE ZERO HOURS
$52.00
WD 4TB Gold Enterprise - 7200 RPM SATA 6Gb/s 128MB CACHE 3.5" HDD - WD4002FYYZ
$42.95
Seagate ST1000VM002 1TB 64MB SATA6Gb/s 3.5" (Low Power) Hard Drive -PC, CCTV DVR
$24.99
HGST Ultrastar DC HC520 12TB SATA 6Gb 256MB 3.5" Enterprise HDD- HUH721212ALE601
$74.99
Seagate ST12000NM0127 12TB SATA 6Gb/s 256MB 7200RPM 3.5" Enterprise Hard Drive
$99.99
1TB HDD/SSD 2.5" SATA Hard Drive with Windows 10 or Windows 11 Pro Installed
$18.99
Seagate Exos X20 18TB SATA 6Gb/s 3.5" Enterprise Hard Drive - ST18000NM003D
$168.00
Seagate ST8000NM0055 8TB 7200RPM 256MB SATA 6.0 Gb/s 3.5" Enterprise Hard Drive
$34.15
Western Digital DC HC320 Ultrastar 8TB 7200RPM SATA HD, HUS728T8TALE6L4, 0B36404
$99.00