☰

面对受感染的文件和错误我下一步该怎么做？

tag-icon • tag-icon 14.10 malware clamav
面对受感染的文件和错误我下一步该怎么做？

我使用 clamav 扫描了我的计算机中的病毒：sudo clamscan -r --bell -i /。我收到以下结果：

LibClamAV Warning: cli_scanxz: decompress file size exceeds limits - only scanning 27262976 bytes

LibClamAV Warning: cli_scanxz: decompress file size exceeds limits - only scanning 27262976 bytes

LibClamAV Warning: cli_scanxz: decompress file size exceeds limits - only scanning 27262976 bytes

/home/beck/Documents/from flash/unsorted/autorun.inf: INF.Autorun.Gen FOUND

LibClamAV Warning: fmap_readpage: pread fail: asked for 4077 bytes @ offset 19, got 0

WARNING: Can't open file /sys/module/ipt_REJECT/uevent: Permission denied

LibClamAV Warning: fmap_readpage: pread fail: asked for 4077 bytes @ offset 19, got 0

LibClamAV Warning: fmap_readpage: pread fail: asked for 4093 bytes @ offset 3, got 0

LibClamAV Warning: fmap_readpage: pread fail: asked for 4094 bytes @ offset 2, got 0

WARNING: Can't open file /sys/module/nf_conntrack_tftp/uevent: Permission denied

LibClamAV Warning: fmap_readpage: pread fail: asked for 4094 bytes @ offset 2, got 0

----------- 扫描摘要 -----------
已知病毒：3775271 引擎版本：0.98.6 扫描目录：98517 扫描文件：1144928 感染文件：2 错误总数：19018 扫描数据：51350.64 MB 读取数据：69028.91 MB（比例 0.74:1） 时间：10960.993 秒（182 分 40 秒）

我成功删除了“自动运行”病毒。但我找不到另一个病毒。那么，我该如何处理受感染的文件和错误？

答案1

为了

decompress file size exceeds limits

请尝试对 clamscan 使用以下选项，（许多）病毒扫描程序不会扫描超过一定大小的文件。

--最大文件大小=(大小/MB/GB)

您可以以 xM 或 xm 格式传递以兆字节为单位的值，其中 x 是一个数字。

例如：–max-filesize=50M

默认大小为 25MB。

来源：http://lurker.clamav.net/message/20140926.143835.3e73415e.nl.html

（手册页）更多信息@:http://linux.die.net/man/1/clamscan

在某些情况下您可能--max-scansize还需要。

--max-filesize=#n
    Extract and scan at most #n kilobytes from each archive. You may pass the value in megabytes in format xM or xm, where x is a number. This option protects your system against DoS attacks (default: 25 MB, max: <4 GB) 
--max-scansize=#n
    Extract and scan at most #n kilobytes from each scanned file. You may pass the value in megabytes in format xM or xm, where x is a number. This option protects your system against DoS attacks (default: 100 MB, max: <4 GB)

相关内容