Antivirus - Yay or Nae?

[fordprefect]

Just wondered what everybody happened to think of running antivirus software on Linux, I've been an avid fan of Ubuntu for years and have only really bothered with Clam in order to scan files that I happened to be sharing with Windows users but was thinking of late about using one of the free pieces of antivirus software that also happens to be available for Windows, such as AVG or Avast, is such a measure needed these days when running Linux or am I being paranoid?

Cheers.

[Nr90]

There's only very little viruses for Linux in general, for ARM they are pretty much nonexistent.
I wouldn't use one.

[abishur]

The only reason I *might* put anti-virus on there is if you're going to have your pi act as a file server to PCs running Windows

[extravagoose]

The only reason I *might* put anti-virus on there is if you're going to have your pi act as a file server to PCs running Windows

But then I suppose one could include the samba shares in a windows scan?

[abishur]

The only reason I *might* put anti-virus on there is if you're going to have your pi act as a file server to PCs running Windows

But then I suppose one could include the samba shares in a windows scan?

Indeed they could, I tend to trust a linux virus scan to identify and successfully remove viruses off a shared drive (and do it for a fraction of the processing power) than I do a windows machine. It's probably worth noting that I use my pi to act as a file server for windows PCs and I don't have virus protection on it. I'm just talking about the one scenario where I would imagine putting an anti-virus scanner on my pi

[reiuyi]

Where does one acquire viruses anyway?

I've never seen any at all. For all I know they might be a myth invented by anti-virus companies, anti-filesharing governmental branches and porno websites.

Do you really need to willingly open up an exe file from unknown obscure sources to acquire a virus? It is not like your computer can do anything on its own if you keep it updated.

[abishur]

Actually, viruses aren't found only in exe files any more. You'd be amazed at what get's stuffed into pictures (particularly advertisements) on websites these days. It's entirely possible to get a virus by going to a "safe" website only to get a virus because the ad on that site was infected with a virus. Though is should be noted for the context of this thread, they tend to be of the Windows variety and wouldn't harm a linux box.

[HerSo]

There's only very little viruses for Linux in general, for ARM they are pretty much nonexistent.
I wouldn't use one.

I think you're a bit wrong, so that there are no viruses for ARM does not hold, the virus have Android mobiles, Android is based on Ubuntu kernel (and this in turn in debian), viruses are programs that leverage errors in operating systems, although Android has virus turn can deduce that any OS can have them, but where do you think you are the dangers of rooting the mobil? precisely the applications that can get you a Trojan in it and the malware that people program against these, the virus not only belong to Windows, there are for all operating systems, since none of them are perfect, have vulnerabilities , that that linux machine or functional low ARM technology is false, if any whether or not such an enormous and way Windows

[hunternet93]

I've never been hit with a virus, but watch out for bots brute-forcing SSH passwords. A while back, I had an internet-facing server running SSH with a 6-character root password. I got a call one night from my ISP saying that my internet connection had been shut down because the server was sending thousands of spam emails. A bot brute-forced my SSH root password and installed a rootkit, I ended up having to reinstall from scratch.

As long as you use long, complex password, disable root SSH logins (now the default in Debian), and don't run programs from untrusted sources, you should be fine.

[chrisryall]

A GIF attachment from a trusted (University) source caused me no end of trouble once, and actually replaced every GIF on my PC kit with itself. Hard to see what people get out of writing these things, and I do think exemplary sentences are appropriate as it causes millions of people grief. I'm a lot softer on hacking, provided it is non damaging, non criminal

[Jessie]

Where does one acquire viruses anyway?

I've never seen any at all. For all I know they might be a myth invented by anti-virus companies, anti-filesharing governmental branches and porno websites.

Do you really need to willingly open up an exe file from unknown obscure sources to acquire a virus? It is not like your computer can do anything on its own if you keep it updated.

Pornography, 50% of peoples PCs I have fixed got viruses by downloading "free" porno. Trust me it is hard (embarrassing) to tell a friend or family member to knock it off. After I had that discussion with my father-in-law now I just tell them all to pay someone else to fix their computers or that next time they get a virus I'm just formatting and reinstalling.

[chrisryall]

.
Last anyone should wonder, AFAIR the GIF in question was the Perth University logo

[Donnie89]

hi i've been using the p.i for a little while now but am still a bit of a novice. I have recently got the net in and my raspberry is going nuts. cant even type simple commands into the terminal, is it possible my raspbien is infected?! And what should i do? antivirus or reinstall raspbien from scratch? Any advice be greatly apprecciated,
many thanks,
Don

[mahjongg]

hi i've been using the p.i for a little while now but am still a bit of a novice. I have recently got the net in and my raspberry is going nuts. cant even type simple commands into the terminal, is it possible my raspbien is infected?! And what should i do? antivirus or reinstall raspbien from scratch? Any advice be greatly apprecciated,
many thanks,
Don

Describe "nuts", its far more likely that you managed to damage your raspbian setup yourself, or you have a power problem, than that you are "infected with a virus". The latter is almost impossible!

My advice, format your SD-card (fully, using the approved formatting tool) and install NOOBS on it.
But also check your power supply! On the new model B+ you could simply check if the "POWER OK" LED burns steadily without blinking, but on the model B, (which you have) the best way is to measure the voltage between the two testpoints TP1 and TP2, and make sure it never goes below 4.75V.

[hunternet93]

hi i've been using the p.i for a little while now but am still a bit of a novice. I have recently got the net in and my raspberry is going nuts. cant even type simple commands into the terminal, is it possible my raspbien is infected?! And what should i do? antivirus or reinstall raspbien from scratch? Any advice be greatly apprecciated,
many thanks,
Don

A virus nearly impossible, unless you downloaded and installed one intentionally.

Also, please create a new post instead of continuing an old thread, you're more likely to be answered that way.

[Donnie89]

ok thanx, defo didnt download it so must jst b corupt! thanx 4 advice new 2 dis, will do dat in future. cheers

[mimi123]

An virus or malware on Linux can only be installed by password cracking.

Who wants to install viruses voluntairly?

If there is one, .

[Richard-TX]

An virus or malware on Linux can only be installed by password cracking.

Who wants to install viruses voluntairly?

If there is one, .

Password cracking isn't the only way to gain root access. An exploit can yield a root shell in a few seconds.. There was a security hole in CUPS some years back. I know of several hundred machines that were compromised (rootkit installed) at that time.

[dylan87]

I'm using Ubuntu without antivirus software for years and never had any trouble so far. If you look at the market share of Linux http://www.statista.com/statistics/2726 ... ince-2009/ you can ask yourself who really would have an interest in attacking Linux computers. Well, and concerning files from Windows users I don't have any fear that some virus could come onto my computer

[florizel]

Linux users don't have root privileges. What users is typically given is lower level account. Meaning virus cannot do damage in root access. It can only damage local file. So, it is more secure!

[seitzdeb987]

How can we detect if there is a virus present in Linux if there is no Antivirus?

[gkreidl]

How can we detect if there is a virus present in Linux if there is no Antivirus?

Check the process list (ps -A).

BTW, Raspbian is only secure if you set sudo to require a password. The default setting is really bad.

Most attacks on linux systems aim at PHP packages running on servers.

[jojopi]

BTW, Raspbian is only secure if you set sudo to require a password. The default setting is really bad.

If you allow your user account to be compromised, it is trivial for the malicious code to escalate privilege next time you legitimately use either sudo or su. Requiring a password does not help at all.

In fact, there is no way to tell in advance whether sudo is configured to require a password, or is even configured. Since any failed attempt will be logged and may alert the administrator, it is far more sensible for malware to trap the next legitimate escalation rather than attempt one of its own.

How can we detect if there is a virus present in Linux if there is no Antivirus?

You may need to change your workflow. Do not download and execute random code, hoping that viruses will be detected in time (which is not guaranteed anyway). Get into the habit of installing software only from trustworthy sources.

[rafcio]

A virus nearly impossible, unless you downloaded and installed one intentionally.

You are very wrong my friend,
I have a NAS / Linux 2.6.22.7 armv5tejl GNU/Linux
and just where infected with some ugly worm, I noticed by accident seeing wget logs

one of the scripts is as follows :
[script removed by moderator, don't post potentially nefarious scrips please!]

[gkreidl]

A virus nearly impossible, unless you downloaded and installed one intentionally.

You are very wrong my friend,
I have a NAS / Linux 2.6.22.7 armv5tejl GNU/Linux
and just where infected with some ugly worm, I noticed by accident seeing wget logs

one of the scripts is as follows :
[script removed by moderator, don't post potentially nefarious scrips please!]

And how did you get infected?