From: Shadow <Sh@dow.br>

On Sat, 02 Jun 2018 19:20:00 -0400, John B. Smith <crasso@verizon.net>
wrote:

>On Wed, 30 May 2018 11:44:05 -0300, Shadow <Sh@dow.br> wrote:
>
>>On Tue, 29 May 2018 16:25:54 -0300, Shadow <Sh@dow.br> wrote:
>>
>>>On Mon, 28 May 2018 19:57:39 -0400, John B. Smith <crasso@verizon.net>
>>>wrote:
>>>
>>>>maybe there was something wrong with the Rescue 10 iso I downloaded
>>>>twice. I'll try downloading it again in a week or so, see if anything
>>>>has improved.
>>>
>>>	Check the MD5 after downloading. Though MD5 is relatively easy
>>>to forge:
>>>
>>>https://support.kaspersky.com/4162
>>>
>>>	They ought to supply SHA 256 or SHA512 as well as the MD5.
>>>Strange for a firm that is supposed to be proficient in security.
>>
>>
>>	Hum, the MD5 link came up 404. Never done that before.
>>
>>	Weird.
>>	The last ISO I downloaded (a couple of days ago) has the
>>following checksums:
>>
>>MD5: 9F617FD4573CAAC2DEFC69017DB4234C
>>SHA-1: D7B6B15E1DBA821E89A439B962357214DADF0995
>>SHA-256:
>>DBDA178E1CD89DBC47E8B7304A1AF5B9F52B7D8BC8DA7DD25FAC080E8C60E4CE
>>
>>	Anyone confirm those numbers ?
>Could you tell me how you obtain these check sums?

	Sure

http://implbits.com/products/hashtab/

	At the bottom of the page, you'll see the installer for XP.
	Install, then right click on any file, look at "properties",
then "file hashes".
	If you right click inside that window, you can choose the ones
you want displayed (I use MD5, SHA1 and SHA256) in "settings".

	The more recent ISO will have different hashes, but the ones
above will probably match the one you downloaded.
>
>I'm kinda confused as I suspect you guys are talking Linux at times
>but I"m not sure. I only have XP.

	When you boot from the Rescue Disk, you are booting into
Linux. Which is good, because you can scan for rootkits which might be
hidden if you scanned from a running Windows system.
>
> I successfully made a bootable USB drive with the krb.iso using Rufus
>and the dd option. I sure didn't take an hour to run the kaspersky
>scan after I booted it. More like a minute.. Is there a way to look
>inside the iso to see if the virus definitions are there?

	Probably because you didn't scan your whole hard drive (look
at the scan settings). By default, Kaspersky Rescue Disk only looks at
boot sectors, system files and your startup programs. It might look at
browser extensions, and programs listed in prefetch too, but I'm not
sure. That only takes a few minutes. Ah, and it checks your hosts
file, and it said mine was "infected". False positive.
	To scan a million files, it took just over an hour, but I have
an 8 core CPU. On my old PC, I'd leave it scanning overnight.
	HTH
	PS The bad thing is you cannot not save a readable log file.
The old version did.
	[]'s
-- 
Don't be evil - Google 2004
We have a new policy  - Google 2012
--- NewsGate v1.0 gamma 2
 * Origin: News Gate @ Net396 -Huntsville, AL - USA (1:396/4)