Page 1 of 1

Re: Good malware hunting for Linux

Posted: Mon Apr 28, 2008 11:41 am
by Fred
jungar,

As the situation exists today, I honestly don't think it is necessary for a Linux desktop that is not being used as a server, is not online 24/7 and is on DHCP instead of a static ip.

I have sane rules in iptables, (Linux equivalent to Windows firewalls), but nothing else. In approximately 10 years of Linux use I have never had a problem.

Having said that, I see no reason not to check your system once in a while, if it makes you feel more comfortable.

The most important thing is to develop good operating habits. Don't run your system as root. Only go into root to perform tasks that require it, then return to your user account. Be reasonable about where you download programs from. Use only reputable repos and other sources. Installing .deb files from your brother's neighbor's cousin's friend, is a very bad idea. Always check the md5 sum against the one on the program developers site when downloading an individual file.

Good luck,

Fred

Re: Good malware hunting for Linux

Posted: Tue Apr 29, 2008 6:12 am
by bobpur
Maybe your linux machine can't get a virus but that doesn't mean that it can't be a "carrier." The virus laden e-mail that you got, that didn't phase your machine, could wreck your friends new (Windows) quad core beauty. Imagine, wrecking your honey's computer.
For this reason alone should a good anti-malware program be used. You can still pass it on.

Re: Good malware hunting for Linux

Posted: Tue Apr 29, 2008 6:19 am
by MagnusB
bobpur wrote:Maybe your linux machine can't get a virus but that doesn't mean that it can't be a "carrier." The virus laden e-mail that you got, that didn't phase your machine, could wreck your friends new (Windows) quad core beauty. Imagine, wrecking your honey's computer.
For this reason alone should a good anti-malware program be used. You can still pass it on.
This is an extremely hypothetical situation, and I find the probability for this to occur ridiculously low:
1. You need to get an email containing a virus and forward it, meaning it has to contain something you find worth forwarding. How many virus infected emails would you have forwarded?
2. For a Windows machine to get infected, it either needs AV to be disabled (if so, you deserve to get infected), or the virus isn't in the AV database, meaning your own scanner probably won't find it either.