Antivirus needed or not?

[software182]

ESET

US link - http://www.eset.com/us/home/products/antivirus-linux/

can we use our NOD32 license to activate this ? #

 

[illumination]

I am free ballin' my Linux Mint 17(which is pretty darn cool)

LOL

 

[illumination]

All the machines in my house are now running Linux, so no worries of transferring anything here, as far as windows goes. But for "poops and Grins" i have been scanning with rkhunter "rootkits" and Clamav, and so far for the last couple months, have found nothing..

 

[nissimezra]

after win 8 and MS topping the support on win xp linux become much more popular and its going to be even more.
within the next 3 years linux will have much more user and can bite 25% of computer users
then you will find much more software for linux include more AV

 

[illumination]

To be honest, they both have their "pro's amd Con's".. Although the lack of software "like Adobe photoshop or Sony Vegas" supporting linux, and certain hardware compatibility problems will keep most people using Windows, this and the familiarity of using windows for so long.

Me personally, i like that i can customize my Linux how i see fit, unlike windows, that if you try to change things to your liking will most likely result in "breaking it", Linux is designed to do so. If i tell my linux to do something, it complies.

Software wise, it has been a lengthy process replacing programs i used to use, with open source ones "only because i have never used them" , but now that i have taken the time, some of them i find to be even better then the paid products i used on windows.

 

[Cats-4_Owners-2]

Once upon a time, downloading with an internet connection not so far away, illumination duel booted linux with Windows. He then passed from this world into the forbidden software no man's land only to return from the wilderness Windows-less!Something good happened there which transformed him, ...but, then again, he was already a pretty nice fellow back when he was just using Windows too!!

 

[Rahadian Putra]

lol..sorry for being off topic, but this thread reminds me of this old video
It's a debate between windows, linux, mac, google and my space



[On topic] I was wandering about whether it's needed to run an AV on Linux or not, so thanks for Illumination for pointing that out and Juhful for creating the thread, I agree with Illumination, clamAv should enough

 

[Cowpipe]

An anti-virus isn't essential on Linux, unless you're dual booting or swapping and changing USB sticks between Linux and Windows constantly

A firewall however, is essential on Linux (in my opinion). Whilst you might not get many viruses on Linux ("what? C? It's C++ you idiot and it's the most powerful language in the entire universe, why isn't it working, what did I do wrong??? gcc myfirstvirus.cpp -o evil").... You will however still be at risk of more targeted attacks by hackers.

ufw is included in Mint by default (I think ), and you can configure it with gufw (http://community.linuxmint.com/software/view/gufw)

General firewall rules apply, close up any ports you aren't using, restrict incoming connections, eg: disable FTP (21) if you don't use it etc etc.. See here for some useful information.

Hope that helps

 

[WinXPert]

An anti-virus isn't essential on Linux, unless you're dual booting or swapping and changing USB sticks between Linux and Windows constantly

A firewall however, is essential on Linux (in my opinion). Whilst you might not get many viruses on Linux ("what? C? It's C++ you idiot and it's the most powerful language in the entire universe, why isn't it working, what did I do wrong??? gcc myfirstvirus.cpp -o evil").... You will however still be at risk of more targeted attacks by hackers.

Almost sums up my setup, NO AV, with FW.

 

[juhful]

can we use our NOD32 license to activate this ? #

YES!!! Username and PW from Windows version works!

 

[Arakasi]

In addition, if you have a Smart Security license, you can use that to install and activate Nod32 AV only.
I assume this was for people who disliked the firewall, and wanted to take it off but still have AV detections.
However a Nod32 license will not activate a Smart security product.

 

[Koroke San]

If u consider about AV then you can use AVG free edition for linux, no need to buy any AV
http://free.avg.com/in-en/download-free-all-product

 

[illumination]

An anti-virus isn't essential on Linux, unless you're dual booting or swapping and changing USB sticks between Linux and Windows constantly

A firewall however, is essential on Linux (in my opinion). Whilst you might not get many viruses on Linux ("what? C? It's C++ you idiot and it's the most powerful language in the entire universe, why isn't it working, what did I do wrong??? gcc myfirstvirus.cpp -o evil").... You will however still be at risk of more targeted attacks by hackers.

ufw is included in Mint by default (I think ), and you can configure it with gufw (http://community.linuxmint.com/software/view/gufw)

General firewall rules apply, close up any ports you aren't using, restrict incoming connections, eg: disable FTP (21) if you don't use it etc etc.. See here for some useful information.

Hope that helps

Mint is based on Ubuntu, so it does have UFW by default, although you have to enable it, GUFW is available in the software center if you are not comfortable with the terminal. You can also use and set rules for IPtables. Apparmor is available for Ubuntu/mint as well as selinux "security enhanced Linux" ..

As Cowpipe is quite correct, you still have to be leery of those with the know how of exploiting Linux. Using GUFW for people not comfortable with the terminal will be a good start, you can create "ADD" rules, and lock the system down, or just leave it at the default which is "Deny Incoming/allow outgoing".

There is also the possibility of attacks/expliots via the browser "why i still use Noscript" even in Linux.

If you are going to run Linux, take the time to learn how to secure it completely. It is a whole different world

 

[ZeroDay]

I haven't read the other comments, but...To answer your question, no, absolutely not. You do not need antivirus software on a Linux machine.

 

[Arakasi]

Hello,

I had to branch out and do some Googling.
http://blogs.sophos.com/2013/12/09/do-you-need-antivirus-on-linux-servers/
http://www.symantec.com/connect/articles/do-we-really-need-antivirus-linux
http://www.linux.com/learn/answers/view/1401-do-i-need-antivirus
http://askubuntu.com/questions/10373/do-i-need-to-have-antivirus-software-installed
Linux does not protect you from bugs in Javascript or web browsers.
This last link of course is a survey where people choose no, but it explains a little as well how its rare, but still exists.
http://www.linux.org/threads/malware-and-antivirus-systems-for-linux.4455/

In the end, if you are a very avid Linux user, chances are you know what you are doing and don't need any software getting in your way, and of course the common sense part comes into play again.

I think everyone has mixed feelings about this, with majority stating you DO NOT NEED IT, as in some of the responses here.
Basically its yes and no. You really have to make your own decision about if you want to use it or not, and what kinds of things you do on your linux box that could potentially cause you to run into malware.
Stay away from Pron for one example !!

illumination was correct that there are barely 50 in the wild linux malware floating around, but i would be interested in revisitting this topic in a few years, as Linux begins to get ever so more popular and the demand for malware on linux rises, especially the financially driven malware!! People love money !!!!

I have also created a thread at ESET's forums as i want to receive more responses than what is here, as well as push this question further.
Feel free to follow along in the coming week(s) as we continue to get responses related to Linux malware.
https://forum.eset.com/topic/2907-eset-do-i-really-need-antivirus-on-my-linux-distros/

 

[Chromatinfish 123]

Yes it's shameful that nobody focuses on Linux for great antivirus.
Comodo- Stall Development
ESET- Slow Update + Very Expensive
AVG- Seriously? No GUI? Stall Development Also

 

[illumination]

Hello,

I had to branch out and do some Googling.
http://blogs.sophos.com/2013/12/09/do-you-need-antivirus-on-linux-servers/
http://www.symantec.com/connect/articles/do-we-really-need-antivirus-linux
http://www.linux.com/learn/answers/view/1401-do-i-need-antivirus
http://askubuntu.com/questions/10373/do-i-need-to-have-antivirus-software-installed
Linux does not protect you from bugs in Javascript or web browsers.
This last link of course is a survey where people choose no, but it explains a little as well how its rare, but still exists.
http://www.linux.org/threads/malware-and-antivirus-systems-for-linux.4455/

In the end, if you are a very avid Linux user, chances are you know what you are doing and don't need any software getting in your way, and of course the common sense part comes into play again.

I think everyone has mixed feelings about this, with majority stating you DO NOT NEED IT, as in some of the responses here.
Basically its yes and no. You really have to make your own decision about if you want to use it or not, and what kinds of things you do on your linux box that could potentially cause you to run into malware.
Stay away from Pron for one example !!

illumination was correct that there are barely 50 in the wild linux malware floating around, but i would be interested in revisitting this topic in a few years, as Linux begins to get ever so more popular and the demand for malware on linux rises, especially the financially driven malware!! People love money !!!!

I have also created a thread at ESET's forums as i want to receive more responses than what is here, as well as push this question further.
Feel free to follow along in the coming week(s) as we continue to get responses related to Linux malware.
https://forum.eset.com/topic/2907-eset-do-i-really-need-antivirus-on-my-linux-distros/

I agree but not completely with the links above, as these are focused more on "Servers" and not home users/desktops.
Running Linux servers is different then running a desktop. Defragging, which you would probably never need on a home based desktop with Linux, would probably be required on a Sever from the mass volume they push, same with AV's, because of the mass amount of data sent/received via the servers..

If one was to only download from the repository, harden the browser with noscript, and set their firewall with custom rules, chances will become slim of an attack/infection. The barely 50 pieces of malware that are coded to run on Linux, can not be run without root access being granted. As long as you are not logging in as "root" or "superuser" this will not be an issue.

If more then one person uses the system, you can disallow root access, by changing root shell. This can be done by changing the root shell to
/sbin/nologin in the /etc/passwd file.

This prevents access to the root shell, and logs any attempts.

 

[jim lin]

since Linux has a different attack vector something like this could help

Arno's IPTABLES firewall

Features

Very secure stateful filtering firewall
It can be used for both single- and multi(eg. dual)-homed boxes
Masquerading (NAT) and SNAT support
Full IPv6 support (including IPv4 / IPv6 mixed mode support)
Multiple external (internet) interfaces
Support multiroute NAT & SNAT (load balancing over multiple (internet) interfaces)
Port forwarding (NAT)
Support MAC address filtering
Support for static and ISP assigned (DHCP) IPs
Support for (transparent) proxies
Full support for DMZ's and DMZ-2-LAN forwarding. You can also use it to isolate your eg. wireless LAN.
(Nmap)(stealth) portscan detection
Protection against SYN-flooding (DoS attacks)
Protection against ICMP-flooding (DoS attacks)
Extensive user-definable logging with rate limiting to prevent log flooding
Includes options to optimize your throughput
User definable open ports, closed ports, trusted hosts, blocked hosts etc.
Log & protection options are both highly customizable
Support for custom iptables rules in a seperate file
It can be used with chkconfig runlevel system (eg. RedHat/Fedora)
Main focus on TCP/UDP/ICMP but additional support for *ALL* IP protocols
Plugin support (to add extra features).
SSH Brute Force (Cracking) Protection (plugin)
DynDNS (Dynamic DNS) support (plugin)
Intrusion Detection System (IDS) (plugin)
Traffic Shaping (plugin)
SIP/VOIP support (plugin)
Traffic Accounting support (plugin)
IPSEC support (plugin)
Support for DSL/ADSL modems, supporting PPPoE, PPPoA and bridging modem setups (plugin)
It works with PoPTop PPTP (http://www.poptop.org)
It works with UPnP
DRDOS protection/detection (experimental)
It's easy to install & configure
And much more...

http://rocky.eld.leidenuniv.nl/joomla/index.php?option=com_content&view=article&id=45&Itemid=63



James

 

[Arakasi]

The barely 50 pieces of malware that are coded to run on Linux, can not be run without root access being granted. As long as you are not logging in as "root" or "superuser" this will not be an issue.

Again, for the last time.
Privilege escalation vulnerabilities may permit malware running under a limited account to infect the entire system on Linux, you dont have to have root from the start.

Thanks for your responses thus far.

 

[illumination]

Again, for the last time.
Privilege escalation vulnerabilities may permit malware running under a limited account to infect the entire system on Linux, you dont have to have root from the start.

Thanks for your responses thus far.

Show me one, as all the research i have done it states, that all 48 pieces of malware that are in the wild, coded for Linux, need root access to run.. Thanks.