PDA

View Full Version : do I need an antivirus?


maheshjr2000
November 4th, 2008, 07:25 AM
Hi sorry for the obvious question but I have only used ubuntu and other linux distros as backup and recovery partitions. For day in day out use do I actually need an antivirus?

aktiwers
November 4th, 2008, 07:26 AM
Not really..
http://www.psychocats.net/ubuntu/security

crazypenguin2008
November 4th, 2008, 07:32 AM
your protected by iptables....

hyper_ch
November 4th, 2008, 07:34 AM
Generally, you don't need antivirus. Please seach this forum, especially the security part, for more info.

your protected by iptables....
How would iptables protect against viruses? Furthermore, by default, iptables filters nothing.

wizard10000
November 4th, 2008, 07:41 AM
Hi sorry for the obvious question but I have only used ubuntu and other linux distros as backup and recovery partitions. For day in day out use do I actually need an antivirus?

I'm gonna depart from popular opinion and say yes, you should have an antivirus package.

Although you may never catch a virus on your Linux machine there's nothing keeping you from transferring a virus from Linux to Windows. Let's look at this scenario -

1. maheshjr2000 receives an email with an infected attachment, which doesn't affect his Linux machine at all, but -

2. Not knowing the file is infected, maheshjr2000 forwards the email to a friend with a Windows machine.

That said, I run clamav on all my Linux installations just so I don't inadvertently infect someone's Windows box. I think it's part of responsible computing.

philinux
November 4th, 2008, 07:42 AM
You're protected by the fact that the virus would need your permission/password to even install itself.
It would have to be a linux virus too.

Bios Element
November 4th, 2008, 07:45 AM
I'm gonna depart from popular opinion and say yes, you should have an antivirus package.

Although you may never catch a virus on your Linux machine there's nothing keeping you from transferring a virus from Linux to Windows. Let's look at this scenario -

1. maheshjr2000 receives an email with an infected attachment, which doesn't affect his Linux machine at all, but -

2. Not knowing the file is infected, maheshjr2000 forwards the email to a friend with a Windows machine.

That said, I run clamav on all my Linux installations just so I don't inadvertently infect someone's Windows box. I think it's part of responsible computing.

No you do not need a virus. I'm gonna be mean and evil here and say this. If a Windows user gets infected tough luck! Sucks to be an idiot. No doubt most will disagree but Another win user getting a virus is simply not my problem. No point wasting time and system resources on an antivirus that will do me, myself and I absolutely no good.

Short answer: Do not install an anti-virus unless you want to waste system resources on virus scanning which is #1 pointless and #2 not your problem.

hyper_ch
November 4th, 2008, 07:46 AM
1. maheshjr2000 receives an email with an infected attachment, which doesn't affect his Linux machine at all, but -

2. Not knowing the file is infected, maheshjr2000 forwards the email to a friend with a Windows machine.
So if that friend is not running antivirus or not up-to-date antivirus on his windows box, what do you think is more likely:

(a) that it is just YOU who send him the virus and he gets infected by it
or
(b) that someone else he knows will send him the virus?

Saint Angeles
November 4th, 2008, 07:48 AM
No you do not need a virus... [snip]
i don't think anybody here disagrees with that statement

wizard10000
November 4th, 2008, 07:50 AM
So if that friend is not running antivirus or not up-to-date antivirus on his windows box, what do you think is more likely:

(a) that it is just YOU who send him the virus and he gets infected by it
or
(b) that someone else he knows will send him the virus?

I'm not worried about what someone else sends, only about what *I* send ;)

And to address Bios Element's comment on system resources - clamav on my machine only takes up about 500k of memory and no processor resources unless it's actively scanning, which I do as a cron job in the middle of the night.

wizard10000
November 4th, 2008, 07:51 AM
i don't think anybody here disagrees with that statement

:lolflag:

overdrank
November 4th, 2008, 07:52 AM
Hi sorry for the obvious question but I have only used ubuntu and other linux distros as backup and recovery partitions. For day in day out use do I actually need an antivirus?
Hi and welcome, I will add to the others
https://help.ubuntu.com/community/Antivirus

Sucks to be an idiot. No doubt most will disagree but Another win user getting a virus is simply not my problem.


A little Harsh do you think? ;)

Haris-MV
November 4th, 2008, 07:54 AM
err thats so cool :) we do not need a anti virus

Dan_Dranath999
November 4th, 2008, 08:03 AM
i suppose, in some cases, it would be more efficient, to scan windows partitions from the "outside"

candtalan
November 4th, 2008, 08:09 AM
The link in the previous response is worth reading. (the psychocats link that is)

I trust that you use a router (cabled or wireless)? It gives a useful measure of protection. If you use wireless, there are some security factors which are worth researching and considering carefully.

Even if your installation had a virus installed, it would be quite hard for it to spread to other linux machines. Generally a user-entered password would be needed at each machine. Also most users install only from the central repository, which is administered by people you trust. So - the linux environment is an infertile one for such things as viruses and also malware.

A strong precaution against malware also exists because open source code is available to be examined in detail - by yourself if you like, or by someone else.

Non open source code, as proprietary code usually is, can contain literally anything - what the vendor intended (be afraid) and also what was not intended - all secret. :-)

hth

maheshjr2000
November 4th, 2008, 08:19 AM
Thanks for all the help guys! :D As for my wireless security I just increased my wireless password to 18 mixed characters.

Edit: WPA2 not WEP

surelock22
November 4th, 2008, 08:21 AM
Are you more open for virus' if you use Windows through VirtualBox? My brain can't grasp the concept of what a VM actually is......

wizard10000
November 4th, 2008, 08:28 AM
Are you more open for virus' if you use Windows through VirtualBox? My brain can't grasp the concept of what a VM actually is......

The VM is about as easy to infect as a standalone Windows machine but a Windows virus won't affect the host Linux system. There's nothing to stop the Windows VM from sending out nasties over teh intrawebz unless the VM has its own virus scanner.

Coolride
November 4th, 2008, 10:00 AM
Yes, i got a trojan in less than 20 minutes surfing gaming websites, my machine started acting funny by the end of the day. So I downloaded Avast, and sure enough, it's what reminds me of Microsoft all over again. I removed the bug ,and it went back to normal again.If I could remember the site , I'd send all the non believers over there, so they could see for themselves.

DexterLB
November 4th, 2008, 10:06 AM
No you do not need a virus. I'm gonna be mean and evil here and say this. If a Windows user gets infected tough luck! Sucks to be an idiot. No doubt most will disagree but Another win user getting a virus is simply not my problem. No point wasting time and system resources on an antivirus that will do me, myself and I absolutely no good.

Short answer: Do not install an anti-virus unless you want to waste system resources on virus scanning which is #1 pointless and #2 not your problem.
I totally agree!

Interpreter
November 4th, 2008, 10:08 AM
"watchu talkin 'bout man?"

handydan918
November 4th, 2008, 10:12 AM
The VM is about as easy to infect as a standalone Windows machine but a Windows virus won't affect the host Linux system. There's nothing to stop the Windows VM from sending out nasties over teh intrawebz unless the VM has its own virus scanner.

True enough, but with a VM, you can take a snapshot of the guest system and restore it to it's pre-infection condition anytime.
It's almost enough to make windows useful again.


Almost.

RequinB4
November 4th, 2008, 10:17 AM
I think one thing that there are two things that haven't been mentioned.

First, anti-virus is not really anti-virus - it is virus-checking. AV works (for 99.999% of the time, there are exceptions) by comparing files or parts of files to known patterns of virus interaction. Since there have been, what, 10 known viruses that will affect a GNU/linux desktop, and none of them running in the wild, the question "should we be vigilant and not be cocky about our virus protection?" is irrelevent because until someone makes a sucessful virus for GNU/Linux there isn't much to check.

Second, there is the beleif that we should run AV to protect those we contact via the internet getting infected. Assuming we're not talking about a mail or SAMBA server or something, let's think about this for a second - what are the possible outcomes?

1) Linux box doesn't get a virus. No problem.

2) Linux box gets a virus, and doesn't transmit it. No harm done, maybe a few wasted bytes of space.

3) Linux box gets a virus, and transfers it to a Windows box, and the Windows box has equivalent or better anti-virus. They don't get infected, so no harm done.

4) Linux box gets a virus, and transfers it to a Windows box, and the Windows box doesn't have antivirus or it fails to detect. Windows user is very sad.

So, let's examine 4. Since the box doesn't have antivirus, and has an open connection to the internet, and (for the sake of argument) is running unsafe applications such as IE or Outlook, its security is already very low. In fact, it's far, far, far more likely that they get the virus not from you but from normal browsing or from ANOTHER windows box which is ACTIVELY propagating the virus. Add the fact that the probability of 1, 2, and 3 is also MUCH higher than 4, and you begin to see my point.

So you must ask yourself - By running AV on your GNU/Linux desktop, are you protecting against the VERY unlikely, or just delaying the inevitable?

Hyper Tails
November 4th, 2008, 10:22 AM
You can get an anti-virus for linux called clamtk

you can download it in the add-remove invatory

I have it installed

I managed to get a virus on my computer

most ever: 3

it's simple to use

DoubleMcLovin
November 4th, 2008, 10:29 AM
The VM is about as easy to infect as a standalone Windows machine but a Windows virus won't affect the host Linux system. There's nothing to stop the Windows VM from sending out nasties over teh intrawebz unless the VM has its own virus scanner.
On a note for this, VM's can be configured to reload the windows install and all files there of to a certain set point.
EX: I install windows, configure my favorite windows programs and games, and create a restore point. Regardless of virus activity my computer will revert to this save every night and remove all active viruses.

Stan%
November 4th, 2008, 11:31 AM
On a note for this, VM's can be configured to reload the windows install and all files there of to a certain set point.
EX: I install windows, configure my favorite windows programs and games, and create a restore point. Regardless of virus activity my computer will revert to this save every night and remove all active viruses.

Unless the virus infects the restore folder. Am I right about that?:confused: I know nothing of VM's.

stalkingwolf
November 4th, 2008, 11:40 AM
This is MY take on this issue. I have an anti virus installed on my system.
WHY? Because I work on other peoples computers. The most common for me "repair" I do is Virus removal ( the record to date is 175). I can stick
their HDD in as a slave/external and scan it several different ways with out threat to MY system.

In todays world most people use some form of standalone email client. Then there are those that use web based email clients. Then there are those uninitiated/uneducated ones that use outlook. The ones that use web based and standalone clients have the advantage of their apps usually using some type of "washer" app. As far as I am concerned anyone that uses outlook
and doesnt have an updated anti virus and some form of email washer is just
"PLUMB DUMB" and should be banished to a Texas Insturments word Processor.

surelock22
November 4th, 2008, 03:36 PM
True enough, but with a VM, you can take a snapshot of the guest system and restore it to it's pre-infection condition anytime.
It's almost enough to make windows useful again.


Almost.

So THAT'S what a snapshot is!!! :kneeslap:

Ok, let me ask another dumb question then: can i get a virus easier if i use the IE tab on FireFox in VB than using IE by itself, or does it not matter anyways? From what I've just read about that snapshot feature, that seems like my ticket to making sure I don't keep a virus. I'll just snapshot after every install check for infection periodically through trendmicro and snapshot back to pre-infection if there's ever a problem.

cardinals_fan
November 4th, 2008, 07:59 PM
Antivirus has extremely limited value on any OS.

ranch hand
November 7th, 2008, 08:25 PM
YES!! You need to worry about virus. You should wash your hands regularly and try to avoid close contact with humanity.

As for passing a virus to Windows users, I would not be to concerned. Most ISPs have excellent virus screening so not only are you unlikely to receive one, you are even more unlikely to pass one as it passes through your ISP and theirs.

Besides that, I have used windows up until last month (when it just got to be too much) and was infected once in the the last decade through using IE instead of Netscape to deal with a site that we had to access. Being paranoid, I scanned right after the transaction and cleared it then. There is no way to protect a computer from the user and that is the source of most problems.

oldsoundguy
November 7th, 2008, 08:36 PM
As a person that repairs a Windows computer now and then for friends, virus files are really the least of the problems now days. Keyloggers, Trojans, Spyware and Spybots, browser hijackers, Smit Fraud items, root kits are the major items of infection and most Anti Virus programs do not deal with them at all. If you are going to run a VM that is open to the world, protection from those items is a must to protect others .. AND YOURSELF from the phone home programs that will phone home the moment you go on line with something Windows. Meanwhile your Linux partition will remain unharmed.

cardinals_fan
November 7th, 2008, 09:06 PM
As a person that repairs a Windows computer now and then for friends, virus files are really the least of the problems now days. Keyloggers, Trojans, Spyware and Spybots, browser hijackers, Smit Fraud items, root kits are the major items of infection and most Anti Virus programs do not deal with them at all. If you are going to run a VM that is open to the world, protection from those items is a must to protect others .. AND YOURSELF from the phone home programs that will phone home the moment you go on line with something Windows. Meanwhile your Linux partition will remain unharmed.
...which is why anti* programs are useless. Intelligent browsing and common sense are all that you need.

aysiu
November 8th, 2008, 01:06 PM
...which is why anti* programs are useless. Intelligent browsing and common sense are all that you need.
A proper permissions separation wouldn't hurt either.

cardinals_fan
November 8th, 2008, 03:03 PM
A proper permissions separation wouldn't hurt either.
Definitely true in order to prevent botnets, but not necessarily useful for preventing malicious damage. Most people keep their documents in their home directories on any OS, and they can be wiped easily.

Interpreter
November 8th, 2008, 03:18 PM
True that, but then I'd like to throw in that there's been that change from "gotcha viruses" to "secret hidden zombie machine-viruses/trojans/stasispywhatevercamoflage-dangers"that don't even try to touch or delete your home-data.
That being said you're right, doesn't change the fact that we all want our data to be safe.

aysiu
November 8th, 2008, 03:19 PM
Definitely true in order to prevent botnets, but not necessarily useful for preventing malicious damage. Most people keep their documents in their home directories on any OS, and they can be wiped easily.
Yes, all personal files should be backed up, but if the personal and system files are kept separate, it's a lot easier to "clean up" if there's any kind of infiltration (delete the limited user account, create a new one, copy the personal files from back up; instead of reinstall the entire system and all the accompanying programs and then create a new user and copy the personal files from backup).

In Ubuntu, reinstallation isn't that much of a chore, but in Windows it can take 4 to 10 hours of your time.