Re: ISO of a linux animalware / antivirus scanner

On 27/08/24 12:11, Carlos E.R. wrote:

On 2024-08-27 01:50, The Doctor wrote:

I suspect a Windows OS with an Intel MB
have malware embedded in them.
>
Are there are Linux ISOs I can use to test my theory?

 You need to ask in a Windows group.
 If you want to use clamav, you can do that with any linux distro of your liking in which you install clamav.
 

I have it (and possibly, I have forgot !, running it), but I ignore how valuable this antivirus is, since it is since 2017 that I have give up following benchmarks of AVs, detections ratings and so.
So I ask : how good is it this clamav ?
I have a win11 install in vwmare (but I dont' even use it to web browse, just pilot the scanner whose linux version is buggy) but I just use its internal "defender".
This clamav is effective enough (and frequently enough updated) for, i.g., cleanup suspect USB keys before exposing them to the W11 guest ? I am not aware if this sharing is sort of a direct tunnelling to the disk or some actions of the hypervisor happens in a transparent layer (possibly relevant for rootkits and so).
how it works inside ? Based on a database signatures or "heuristic" / intercepting suspect behaviours ?
Is it equally / less / more safe to use an AV in a virtualized environmente ? I'd say : no (since this one is at the host level and act before the USB key is unmounted from host and connected in the guest, but just mere suppositions).
And windows defender inside a VM is known to be effective as in a real machine ?
my knowledge of AV is really outdated now !
--
1) Resistere, resistere, resistere.
2) Se tutti pagano le tasse, le tasse le pagano tutti
MarioCPPP