Hello all, Have some dubious ghost images which might the source of many malware related problems I've had, the question is can I do proper scans of gho and ghs files? Avg and sophos and clamwin all seem to not actually scan the contents of the image since they finish in about a second.
No, I don't believe that you can scan the files because the antivirus probably just treats it as a data file.
Bummer, that would be a good thing for Norton to develop, a tool for malware scanning ghost images... ©
I'm not completely certain, but I believe that you'd have to restore the image to another HD, then scan that. I've looked over the Symantec article about Ghost images, and they expect you to do a full virus scan before backing it up, and they don't mention scanning the actual image, so I don't think you can just scan the file.
LDee, i think seb is right but not certain as i haven't come across that problem. do you have or can borrow a spare hd to put those images on to see if infected or not?
Thanks for replies. We have disks to image and then scan, problem is that we have quite a lot of images. Suppose it will have to be the long way.
Yea, seb is right, any virus scanner will treat the image as a data file and you will not be able to detect the virus. Like they said, I'd restore the image onto a HDD and scan from there.
