Anti Virus Poll

[Dookus]

The option for a program to update the "hosts" files from a site such as http://winhelp2002.mvps.org/hosts.htm would be a good idea also, it's my main line of defence in Linux and a must in Windows, also helps save bandwidth, only problem is if you want to follow a link from a google result you need to copy and past the link not click the link within the results if it's a google add.

[nublix]

Okay. Thanks  .

[newtusmaximus]

AFAIK the latest clamav/clamTK can be set to update virus signatures automatically.

Jerry updated Clamav/TH in an earlier post on this thread.

I've built some packages using all the latest code since the repos seem to have a mix & match approach. If anyone would like to test:

32bit only at this stage.

https://www.linuxliteos.com/files/clamav-lite-builds.tar.gz

extract, then in the extracted directory:

Code: [Select]

sudo dpkg -i *.deb
then:

Code: [Select]

sudo apt-get install -f
Then start ClamTK from the Accessories Menu.  Do 'Update Assistant' on ClamTK (double click to open any options in ClamTK) then do 'I would like to update signatures myself', click Apply then back, then do 'Update' 'Check for Updates, OK. It will take 5 -10 mins to get latest the definitions.

[nublix]

If I had voted, I'd have chosen 'Add to Lite Software'. 

Being a Linux newbie, I don't know if my question is relevant or even make sense but: would the AV app needs updating very often like Norton LiveUpdate / Virus Definition Update or something like that?

If so, would Lite facilitates such frequent updates?

[IdigLinux]

Not needed.

[newtusmaximus]

 As I understand it, many new to linux dual boot  especially at the "learning" stage.  As such having a virus software package in LL might be a wise precaution to provide an independent way of checking the windows partition??.  I used to use puppy linux with clamav on a usb stick as a screening and file recovery tool.

[frank392]

I use ESET NO32 and it works great!!

https://www.eset.com/us/products/nod32-antivirus-linux/

[flyingwindjam]

Anti Virus is only needed when running windows software with wine or using samba or other shares. There is malware for Linux and it is little growing but with security in mind do not abuse the root password, take care by every action and you are pretty safe. I have running windows software with wine and was using the bitdefender for unices and the detection of malware was all windows garbage so mine opion not needed an AV for Linux.

[firenice03]

Hate to say, nothing is off limits...
Not sure if an AV would of caught, but came across..
http://blog.linuxmint.com/?p=2994
Kudos to the Mint folks for their transparency and diligence. I hope they get it straightened out..

Always good to confirm the check sums, not just for corruption...

[kiko]

I am a Linux user to 5 years never needed antivirus.
Then I voted to add the Lite software.
Who want to install the antivirus is by the will of each user.

Hugs.

[Jerry]

By researching the virus names on the internet and following any recommendations outlined therein.

Sent from my Nexus 6 using Tapatalk

[newtusmaximus]

Jerry,
Thanks for this =
LL 2.8 single boot
Re: https://www.linuxliteos.com/files/clamav-lite-builds.tar.gz
a)  Completely removed  via Synaptic previous version of clamav and associated + clamTK
b)  Downloaded tar.gz from your link into special folder  and followed terminal instructions in that folder
c) All proceeded smoothly.
d) Accessed clamTk via menu/accessories and set settings for manual updates - No  antivirus signatures appeared to update - surprising??
e) Scan of whole of "linuxlite" directory taking place - will update feedback when completed. ( false positives?? etc)

Update:
 AntiVirus Signatures Installed  = 21376
107454 files searched
Possible 4 threats  listed  = 2 x wintrojans (Win.Worm.Chir-2636  &  Win.Trojan.Ramnit-6279) - These presumably carried over in copy folders from Win Vista days.
+ 2 heuristic -encrypted pdfs ; Re pdfs- how would you  verify ensure that these are not a threat??

[N4RPS]

Hello!

I've looked at nearly every available free AV option for Linux. In spite of the false positives, ClamAV is the one I always come back to.

Code: [Select]

sudo freshclam
will update ClamAV. It SHOULD be the first thing ClamAV does when it runs, but if not, a script could pull 'em in before running ClamTk.

Good luck with trying to get the ClamAV folks to add any false positives to THEIR whitelist.  I can't remember if ClamAV has a whitelist feature in it that a user can add to, so I guess it's time to install it again - lest I speak from a position of ignorance...

73 DE N4RPS
Rob

[Wirezfree]

@newtusmaximus...
Yes, the download options seems to not work

If you go here:
https://forums.comodo.com/comodo-antivirus-for-linux-cavl/comodo-antivirus-for-linux-cavl-v112680251-is-released-t92199.0.html
Then scroll down to .deb versions 32/64, links seem to work for me, on Chrome, latest version.

EDIT:
Read the posts also on that link... some offer solutions if it does not run, You may still need to patch it also.?


GL

[newtusmaximus]

WirezFree my issue is that
https://www.comodo.com/home/download/download.php?prod=antivirus-for-linux&track=3646&key5sk1=21576b73dc5154af17764ba6f55489484b5bc269#
 does not currently seem to let me download Comodo 32 bit.
Nomko - agree with your synopsis.  However as part of work I need to share files with others who are not linux users hence "screening" of attachments not generated by me would be helpful.  More eyes  looking for malware/viruses etc the better.

If Clamav data base not being refreshed regularly using clamTK GUI, then the program is of little value.

Has anyone tried AVG linux derivative?
http://www.unixmen.com/install-avg-free-antivirus-on-ubuntu/
http://ubuntuforums.org/showthread.php?t=136064