Linux Desktop AV and Linux rootkit

Maybe a stupid question but I'd like to have a confirmation before change from Trial to buy some licenses.
I read documentain about linux and there are data about malware / virus / spyware.
The most dangerous in linux are rootkit. I cannot find any clear statement
"Eset 4 for linux desktop is able to identify and protect against linux rootkit"
Ok rootkit are malware but there is a sure sentence somewhere Native Linux rootkit are detected by Eset Linux Deskotp AV ?

 

Hello,

Please see page 11 - "4.1.3 ThreatSense engine parameters setup" of product's manual.

ESET NOD32 Antivirus 4 for Linux Desktop Installation Manual and User Guide

Hope this helps.

 

Just use rkhunter it's free. No need for an AV in Linux.


http://rkhunter.sourceforge.net/

 

Usually AV vendors block exploits even before the OS get the update patch for the vulnerability.

 

Linux is not vunerable to MS Windows exploits. Almost all Linux distros are out of the box locked down & can't be harmed. Sorry but an AV for Linux is a waste of resources.

Said better by smarter folks.
https://www.wilderssecurity.com/showthread.php?t=309360

 

I agree. To write malware for linux would be insanely dificult. You have compile for ever distro and every posible setup. For example let's say you wrote a virus for Ubuntu 11.04 and I ran Ubuntu 11.04 but I used a more up to date libc or other library, your malware would fail instantly. The problem with Linux is that malware (if not compiled on that machine) will probably fail or be crippled. Not to mention almost all exploits against linux are Local access only (LAN, at the computer, RDP, SSH).

I do run Eset Nod32 on my Fedora box but that is to prevent files from being transfered onto other (windows) computers.

 

"ThreatSense technology also successfully prevents rootkits."

This is what I found out in manual guide , so answer seems to be yes.

About what you said I can see a potentila danger : be too much sure that rootkit can't enter in a linux box. Too much sure = No attention for = potentila weakness.

 

Ah I agree, I only download via repos and only after fact checking