Linux Myth Busting

Status
Not open for further replies.

Vipersd

Level 6
Verified
Dec 14, 2014
285
Good video and He is on target for most things. He is right about inaccurate information on many Linux community websites that are copy/paste information from old days when the thing were accurate or mostly accurate.

On malware it is a little dodgy comment.
He scanned and found windows oriented files on his drive which could be (are) infected, that does not prove that Linux OS itself is infected. You can copy infected windows files on your hard drive with Linux installed and try to run and you would get info that it cannot be run. Exotic cross platform malware or pure Linux based malware is known but very rare and are more inclined on phishing and conning the user to run file with root privileges so that Linux OS could be infected.

So how did exe and dll file got on his SSD, where is this Imagination program coming from, official repo or some dodgy website.

Windows and Linux file fragmentation complete diferent thing, but His statement that even Linux files get fragmented is true.

He is right about UUID and swapping hardware on current computer configurations.
 

jamescv7

Level 85
Verified
Honorary Member
Mar 15, 2011
13,070
I should agree to @Vipersd, Linux AV today are pack with windows based definition because it includes any infection rate when use the emulator; by default its environment may not be totally infected.

Tmp (Temporary files) isn't yet considered to be infected, unless its been drop some files on crucial directory.
 
M

MalwareT

Thread author
Linux can't execute exe files unless running Wine.
 

thepierrezou

Level 8
Verified
Sep 25, 2013
375
Hello,
Like any system it can be infected if people do stupid things.
It's verry hard to get infected with a well-configured firewall, selinux, ptrace restriction, etc...
Antivirus on Linux are just useless unless you had a computer with Windows ^^
It's you launch an .exe on Linux with Wine, if your system is correcly configured, it can't acces to your browser or other software.

If you have a ssd, it's just useless to defrag the disk and for a normal disk it's useless too with ext4 if it has been correctly created and mounted.
 
Last edited:

jamescv7

Level 85
Verified
Honorary Member
Mar 15, 2011
13,070
@wexwimpy : Linux at default environment will never run Windows application, because its current file extension are tar, gz, .deb and others which will only run without limit. Therefore you are NOT infected in that case.
 
I

illumination

Thread author
In the video, he explains that he is not running wine or any other windows components of any kind. Yet, upon installing Imagination, he found in two of its temporary files, two windows based trojans. After looking up this DVD software program "Imagination" and going to Source forge to check it out, Ublock, stopped me from accessing the page..

Now this is probably where terminology comes into play, and how ones perspective of it may differ..

With humans, one can carry a disease without actually being sick, and is still considered "infected".. I would assume this applies to computers as well, if they were to carry a piece of malware, without it being active on that particular system, it could still be considered "Infected"

A question up above, and a very good one, is why did the two pieces of windows based malware sitting in temp files for the program, stop it from opening and being used on linux..

Bottom line, is that there are many that claim, linux never gets infected, you never need to scan it, or worry, and that is just plain wrong, and the point that he was trying to present in the video.
 
Status
Not open for further replies.

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top