Windows ---> Linux, do I still need to worry about viruses?

Discussion in 'all things UNIX' started by mattdocs12345, Aug 31, 2013.

Thread Status:
Not open for further replies.
  1. mattdocs12345

    mattdocs12345 Registered Member

    Joined:
    Mar 23, 2013
    Posts:
    1,785
    Location:
    US
    Okay guys, as some of you know Im jumping the ship. Now I have few questions security related.
    I am running Ubuntu 12.04, classic gnome. Do I still need to worry about viruses, malware, loggers, etc??
    1) Should I still run no-script? I really dont want to because it breaks a lot of pages.
    2) I am running now noscript with scripts allowed globally. Does it mean that it will still block known malicious websites or should I uninstall it completely?
    3) Do I need a firewall?
    4) Should I get an AV?
    Im a very noob here. Sorry for obvious questions.
     
  2. Hungry Man

    Hungry Man Registered Member

    Joined:
    May 11, 2011
    Posts:
    9,148
    Re: Widows ---> Linux, do I still need to worry about viruses?

    Can you still be attacked? Yes.

    Fundamentally, Linux and Windows are not so different. Attacking one is *similar* to attacking the other. But, because Linux is not a popular operating system, it's rare to see it attacked in the wild.

    That said, even though you are unlikely to be attacked, it can happen. So on to your other questions.

    1) If you're used to noscript, sure, use it. It's a great way to stay secure, and it will prevent OS-agnostic attacks like XSS/CSRF.

    2) Allowed globally still prevents XSS/CSRF, though it is less secure than globally denying. One compromise is to allow by Top Level Domain - give that a try.

    3) You can use a Firewall. UFW is installed by default and easy to use. You can also install GUFW.

    4) No. There's no need.

    If you are looking for extra security for Linux, there are guides out there, but it depends what level of security you're looking for and how much work you want to put in. For regular users it's enough to simply only install from the software center.
     
  3. NormanF

    NormanF Registered Member

    Joined:
    Feb 20, 2009
    Posts:
    1,441
    Re: Widows ---> Linux, do I still need to worry about viruses?

    You need a firewall.

    Install GUFW in Ubuntu and put it on the default settings! That's it.

    You do NOT need to run AV on Linux/Mac OSX. I have never seen the need to run it.
     
  4. Kerodo

    Kerodo Registered Member

    Joined:
    Oct 5, 2004
    Posts:
    7,786
    Re: Widows ---> Linux, do I still need to worry about viruses?

    Assuming he has a router, then no, he won't need a firewall. No AV either. It's best if he just tries hard to drop the windows mentality altogether in linux...
     
  5. Baserk

    Baserk Registered Member

    Joined:
    Apr 14, 2008
    Posts:
    1,317
    Location:
    AmstelodamUM
    Re: Widows ---> Linux, do I still need to worry about viruses?

    Noscript doesn't use a list of known sites hosting malicious crap.
    It's whitelist only afaik.
    You might want to encrypt your /home (or wherever you have sensitive/personal info) when travelling.
    Perhaps remove/uninstall java/IcedTea if you are allergic.
    On linux, the GUI for the firewall/ip-tables is a no-brainer so use it.

    edit: and read this.
     
    Last edited: Aug 31, 2013
  6. NGRhodes

    NGRhodes Registered Member

    Joined:
    Jun 23, 2003
    Posts:
    2,331
    Location:
    West Yorkshire, UK
    Re: Widows ---> Linux, do I still need to worry about viruses?

    You only need a firewall (local or network level) if you install services that can be accessed remotely.
     
  7. mattdocs12345

    mattdocs12345 Registered Member

    Joined:
    Mar 23, 2013
    Posts:
    1,785
    Location:
    US
    Re: Widows ---> Linux, do I still need to worry about viruses?

    good article thank you.
     
  8. J_L

    J_L Registered Member

    Joined:
    Nov 6, 2009
    Posts:
    8,516
    Re: Widows ---> Linux, do I still need to worry about viruses?

    I thought it was only for easier configuration of iptables, especially for outbound control?
     
  9. NormanF

    NormanF Registered Member

    Joined:
    Feb 20, 2009
    Posts:
    1,441
    Re: Widows ---> Linux, do I still need to worry about viruses?

    Iptables in Ubuntu can be set up with the GUI front-end GUFW. The default rules are fine for most users - unless you need to create special rules.
     
  10. mirimir

    mirimir Registered Member

    Joined:
    Oct 1, 2011
    Posts:
    6,030
    Re: Widows ---> Linux, do I still need to worry about viruses?

    That's true, as far as your own security goes. However, it would be bad form to send malware to Windows users, no?

    I occasionally run Clam AV, just in case.
     
  11. guest

    guest Guest

    Re: Widows ---> Linux, do I still need to worry about viruses?

    Wouldn't VirusTotal, Jotti, etc can be used instead? ClamAV isn't really that good AFAIK.
     
  12. NGRhodes

    NGRhodes Registered Member

    Joined:
    Jun 23, 2003
    Posts:
    2,331
    Location:
    West Yorkshire, UK
    Re: Widows ---> Linux, do I still need to worry about viruses?

    How would a Linux user send malware to a Windows user ?
     
  13. J_L

    J_L Registered Member

    Joined:
    Nov 6, 2009
    Posts:
    8,516
    Re: Widows ---> Linux, do I still need to worry about viruses?

    I used to run Clam AV and BitDefender, but found them useless except for servers.
     
  14. Andz

    Andz Registered Member

    Joined:
    Jan 9, 2013
    Posts:
    75
    Re: Widows ---> Linux, do I still need to worry about viruses?

    How do we make sure no such services are running or installed?
     
  15. NormanF

    NormanF Registered Member

    Joined:
    Feb 20, 2009
    Posts:
    1,441
    Re: Widows ---> Linux, do I still need to worry about viruses?

    The only reason for AV is to check e-mail attachments you might send to Windows users. I think its completely unnecessary. Just keep the firewall turned on and you should be ok. :thumb:
     
  16. NormanF

    NormanF Registered Member

    Joined:
    Feb 20, 2009
    Posts:
    1,441
    Re: Widows ---> Linux, do I still need to worry about viruses?

    In an e-mail attachment. It won't run on Linux but it might infect a Windows' users PC if not checked beforehand.
     
  17. J_L

    J_L Registered Member

    Joined:
    Nov 6, 2009
    Posts:
    8,516
    Re: Widows ---> Linux, do I still need to worry about viruses?

    For that (as GrafZeppelin said), VirusTotal or Metascan Online is better unless you're attaching 81+ MB executables or a lot of files that can't be manageably archived.
     
  18. taleblou

    taleblou Registered Member

    Joined:
    Jan 9, 2010
    Posts:
    1,168
    Re: Widows ---> Linux, do I still need to worry about viruses?

    You could use comodo linux as I have. It has active shield and detects as good as normal comodo AV and its free.
     
  19. NGRhodes

    NGRhodes Registered Member

    Joined:
    Jun 23, 2003
    Posts:
    2,331
    Location:
    West Yorkshire, UK
    Re: Widows ---> Linux, do I still need to worry about viruses?

    I personally think its the mail provider who should run AV.
    Where does the infected email come from in the first place though ? Another Windows user ?

    Cheers, Nick.
     
  20. Enigm

    Enigm Registered Member

    Joined:
    Dec 11, 2008
    Posts:
    188
    Re: Widows ---> Linux, do I still need to worry about viruses?

    Why is that ?
    Is it because ClamAV doesn't pop up 'virus-warnings' all the time, triggered by the guessing of so-called 'heuristics' ??

    It's a serious question, you would not believe how many people think they got infected, because some stupid AV pops up 'warnings- aka 'false positives' -all the time ..
    Guess it makes people feel they are actually getting something for their money .
     
  21. mack_guy911

    mack_guy911 Registered Member

    Joined:
    Mar 21, 2007
    Posts:
    2,677
    Re: Widows ---> Linux, do I still need to worry about viruses?

    you may or can install avast or bit-defender to scan pendrives or for fun to make you feel like windows ;)

    also you can do i before download files you can scan them on

    virustotal site

    for rootkit scan in linux rkhunter and chkrootkit is given but it does give sometimes false positive warnings so carefull with them :)
     
  22. guest

    guest Guest

    Re: Widows ---> Linux, do I still need to worry about viruses?

    A question I can't answer. I'm lacking the solid proof so all I can say is that it's not good based on my selfish point of view.

    It's not a false positive if it locked your computer and gives you a warning that your computer has been "suspended" because of child pornography while asking you for ransom.
     
  23. Enigm

    Enigm Registered Member

    Joined:
    Dec 11, 2008
    Posts:
    188
    No, in the case you describe something IS 'wrong' ..

    ClamAV doesn't protect against malicious websites,
    because it is 'only' a file-scanner .
    (There's 'clam-glue' but it uses upwards of 50% CPU last I tried it)
     
  24. wat0114

    wat0114 Registered Member

    Joined:
    Aug 5, 2012
    Posts:
    1,985
    Location:
    Canada
    Newly acquired files from email or the browser are not automatically given executable rights, and renaming the files won't matter because Linux and the applications it runs don't identify the file's properties by file extension so that's a plus for Linux. If you download and install everything from known repositories, then AV should not be required.

    And although some people don't like this to be stated, since Linux' market share is so small, it benefits from a kind of "herd immunity" so a virus written for it is never likely to take hold in the wild.
     
  25. guest

    guest Guest

    I was talking about detection rate. What makes you think it was about malicious websites? o_O

    The ransomware is just an example, and my main point was detection and removal.
     
Loading...
Thread Status:
Not open for further replies.