Clean an infected computer with Ubuntu Antivirus Boot CD

View previous topic View next topic Go down

Clean an infected computer with Ubuntu Antivirus Boot CD

Post by Admin on Wed Feb 24, 2010 8:03 am

[/youtube]

I've put together a Live Ububntu Cd that can be used to clean an infected Windows machine of malware. It uses the native linux version of Avast antivirus. It also uses the windows Malwarebytes by way of wine ( a windows compatibility layer for linux ).



You can download it here.
http://dl.dropbox.com/u/10887985/Ubuntu%20Antivirus.iso


It is now automated with popup menus telling you exactly what to do.

The first thing you need to do after running the Live CD is to mount the Windows drive by clicking the "My Computer" icon to open your file manager and then double click your windows drive to mount it. Take note of the location of your windows drive (it will probably be something like /media/disk ).

Next you need to configure wine. Go to the drives tab click add drive then enter your windows location where it says path.

Next you should start avast. This version of avast is a native linux binary and does a great job finding virus's on windows drives. Do an update. Then run a scan on your windows drive.

Next run a scan with Malwarebytes. Update the definitions. There is a compatibility problem with Malwarebytes and WINE using the update procedure. Then run a full scan on your windows drive. When the scan is finished remove all malware as instructed.

By this point your drive should be clean. You should shut down the live cd and re-boot windows. After booting back into windows you should install and run Malwarebytes again to check for any leftovers (mainly all you will find now are registry files left over from the virus's and malware that needs to be removed. When running those scans in linux you are unable to remove files from the windows registry. Hence the need to run this scan). Once this scan is complete and you have removed any leftovers you system should now be completely clean and safe to use.

Make sure to check your installed antivirus software before you shut down. Some malware and virus's can delete and/or disable your antivirus software and you may need to either re-enable it or re-install it.


Last edited by Admin on Sun May 08, 2011 8:59 pm; edited 7 times in total (Reason for editing : updated the iso with newer lxde user interface for easier use on older systems.)

_________________


avatar
Admin
Admin

Posts : 12
Join date : 2009-12-23

View user profile http://virushelp.forumotion.com

Back to top Go down

Re: Clean an infected computer with Ubuntu Antivirus Boot CD

Post by jimdays on Thu Apr 29, 2010 8:13 am

I was wondering if you could post that 690MB ISO to Rapidshare (using split rars) because I can't seem to download it properly.
The download from your server doesn't work for me.
The following is the size of the iso file that I have downloaded. Can you check to see if it is correct?
ubuntuantivirus_nonetwork.iso - ISO9660 archive, unpacked size 723,892,534 bytes
When I burn to a cd, I get the ubunto desktop, but I also get and error that says,
Sorry, the program "gvfsd-metadata" closed unexpectedly.
I can't get Malwarebytes to run and I have difficulty getting avast to run. I followed the directions carefully in the flv video (configuring Wine.)
Is there any other such similar iso on the Web that you know of (ubunto with avast and malwarebytes to clean Windows)?

jimdays

Posts : 4
Join date : 2010-04-29

View user profile

Back to top Go down

Re: Clean an infected computer with Ubuntu Antivirus Boot CD

Post by Admin on Thu Apr 29, 2010 8:28 am

I'm aware of the metadata bug. It seems to be introduced in the 9.10 version of ubuntu which I use as a base. I'm trying to track down where that problem is. I may just bump back down to an older version of Ubuntu to see if it would be more stable. However it shouldn't affect the operation of Avast or Malwarebytes.

Keep in mind that it may take a minute or two for malwarebytes to open. Running wine from a cd takes some time. I paused the video between the time that I clicked malwarebytes and the time that it opened.

I know of no similar iso like this which is why I created this one myself. When I get the metadata issue solved I'll post a new download.

_________________


avatar
Admin
Admin

Posts : 12
Join date : 2009-12-23

View user profile http://virushelp.forumotion.com

Back to top Go down

Re: Clean an infected computer with Ubuntu Antivirus Boot CD

Post by jimdays on Thu Apr 29, 2010 4:35 pm

When you post the new download, can you please post a mirror on Rapidshare (200mb limit so use 4 split rars,) or maybe www.filesend.net ( allows 1gb file with free registration). Zshare does not work correctly for me.
I waited at least 15 minutes (after ubunto desktop appeared and configuring wine) to try to get Malwarebytes to run. Could never get Malwarebytes to open up. After many tries, could get Avast to open up only twice. Then froze during scanning. Can you check to see if this file that I downloaded from Zshare is the right size? Maybe the file I downloaded is corrupt (different size than should be).
ubuntuantivirus_nonetwork.iso - ISO9660 archive, unpacked size 723,892,534 bytes

jimdays

Posts : 4
Join date : 2010-04-29

View user profile

Back to top Go down

Re: Clean an infected computer with Ubuntu Antivirus Boot CD

Post by Admin on Fri Apr 30, 2010 3:45 pm

The malwarebytes problem seems to be related to the new updates.
http://forums.malwarebytes.org/index.php?showtopic=45938
Hopefully they will fix it in the next version.

For now try running malwarebytes without updating it.

_________________


avatar
Admin
Admin

Posts : 12
Join date : 2009-12-23

View user profile http://virushelp.forumotion.com

Back to top Go down

Re: Clean an infected computer with Ubuntu Antivirus Boot CD

Post by jimdays on Wed May 05, 2010 8:52 am

I burned another CD from your iso file and this time I got better results. However, I have a question. When I run Avast on the Windows drive, Avast scans about 38,000 files (didn't find any viruses) and then Avast just disappears. There is no message saying that Avast has finished scanning. Is this normal? I would expect that Avast would say that it has finished scanning and that no errors were found, however, I never got any such message. Avast just quit after scanning about 38,000 files. Does the same thing happen when you try to run Avast on your computer?

jimdays

Posts : 4
Join date : 2010-04-29

View user profile

Back to top Go down

Re: Clean an infected computer with Ubuntu Antivirus Boot CD

Post by Admin on Wed May 05, 2010 1:15 pm

No. You should get a message box saying no virus found.


I'll try to upload another iso to an alternate site later this evening or tomorrow.

_________________


avatar
Admin
Admin

Posts : 12
Join date : 2009-12-23

View user profile http://virushelp.forumotion.com

Back to top Go down

Re: Clean an infected computer with Ubuntu Antivirus Boot CD

Post by jimdays on Thu May 06, 2010 12:29 am

One other important piece of info. I do not do the updates on Avast. I just configure Wine and then start Avast. The reason I don't do the updates is that my internet requires a special software that can only be used in Windows. That is fine with me, but can you test your disk one time without updating Avast? I want to eliminate that variable.
For some reason Avast only runs about 10 minutes (checked about 38,000 files) and then the Avast window just disappeared. I couldn't get it to come back.

jimdays

Posts : 4
Join date : 2010-04-29

View user profile

Back to top Go down

Re: Clean an infected computer with Ubuntu Antivirus Boot CD

Post by Admin on Thu Sep 02, 2010 11:11 am

Updated Ubuntu Antivirus.
Fixed some problems with avast updates. It now updates just fine.
You still can't update malwarebytes but you can use it as long as you don't update it.

The download is bigger than before but that couldn't be helped.
You can download it here.
http://bit.ly/cDQKVT

this is a new download link as of 09-02-2010
I will also be uploading a couple of mirrors in a couple of days

mirror
http://bit.ly/agrvUo


major update
all updating problems have been fixed. See new video in first post.
new download link
http://dl.dropbox.com/u/10887985/Ubuntu%20Antivirus.iso


Last edited by Admin on Sun May 08, 2011 9:01 pm; edited 3 times in total (Reason for editing : shortened the dropbox link so that I could get download statistics)

_________________


avatar
Admin
Admin

Posts : 12
Join date : 2009-12-23

View user profile http://virushelp.forumotion.com

Back to top Go down

Re: Clean an infected computer with Ubuntu Antivirus Boot CD

Post by Sponsored content


Sponsored content


Back to top Go down

View previous topic View next topic Back to top

- Similar topics

 
Permissions in this forum:
You cannot reply to topics in this forum