LinuxQuestions.org - virus on my ydl linux

- Linux - Newbie (https://www.linuxquestions.org/questions/linux-newbie-8/)

- - virus on my ydl linux (https://www.linuxquestions.org/questions/linux-newbie-8/virus-on-my-ydl-linux-656455/)

virus on my ydl linux

hi i have yellow dog on my ps3 and im using fire fox.i was browseing a site about dental health and a pop up said ive lots of viruses on my new ps3,now i thought this weird cos im using linux not windows but the pop up said i have trojans and what not.anyway it auto scvanned my ps3 some how and said the only way to fix my machine is to install there antivurus 2009.it was an exe file ,linux cant use exe so is my ps3 virused up now?.ps i think this is a scam to trick windows users.but is my linux box infected

Sounds like a scam to me. Which company was it from?

Actually your PS3 is perfectly fine. . .

HOWEVER, I have scanned your bank account, and you are about to bounce a check. If you want to prevent the check from bouncing, you should immediately add me as a joint account holder so that I can make sure the funds stay available.

Yeah, that sounded ridiculous too.

It's a scam to scare people into buying their product. You have several things going for you...

1) you're using Linux, not likely to get a virus.
2) you're using YDL which is a PPC based distro, even less likely to have viruses for due to very small install base.
3) if they had a scanner that would work through the web, it probably wouldn't work in Linux.
4) you have a PS3 (this doesn't affect your ability to get a virus, but it's still an awesome game system)

Have fun and welcome to LQ!

Forrest

Quote:

it auto scvanned my ps3 some how and said the only way to fix my machine is to install there antivurus 2009

This was of course no scan at all - just a standard "result" returned to everyone to pretend ... whatever.
It did not even bother to actually check for your OS - had it done that it would not have offered you (to BY of course) some windows-only program to "protect" you from what they say you are vulnerable to...
A simple firewall - and only running services you really need - can indeed further your security - which is already very high, as has been explained.
As an example - the firewall-script I use on my laptop:

Code:

#!/bin/sh



# Begin



startFirewall() {



# Insert connection-tracking modules (not needed if built into the kernel).

modprobe ip_tables

modprobe iptable_filter

modprobe ip_conntrack

modprobe ip_conntrack_ftp

modprobe ipt_state

modprobe ipt_LOG



# set a sane policy:    everything not accepted > /dev/null

iptables -P INPUT    DROP

iptables -P FORWARD  DROP

iptables -P OUTPUT  DROP





# allow local-only connections

iptables -A INPUT  -i lo -j ACCEPT

# free output on any interface to any ip for any service (equal to -P ACCEPT)

iptables -A OUTPUT -j ACCEPT



# permit answers on already established connections

# and permit new connections related to established ones (eg active-ftp)

iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT



#ssh

iptables -A INPUT -p tcp -m state --state NEW --dport 22 -j ACCEPT



# be verbose on dynamic ip-addresses    (not needed in case of static IP)

echo 2 > /proc/sys/net/ipv4/ip_dynaddr



# disable ExplicitCongestionNotification - too many routers are still ignorant

echo 0 > /proc/sys/net/ipv4/tcp_ecn



# End



}



# Begin firewall.stop



stopFirewall() {



# deactivate IP-Forwarding 

echo 0 > /proc/sys/net/ipv4/ip_forward



iptables -Z

iptables -F

iptables -t nat        -F PREROUTING

iptables -t nat        -F OUTPUT

iptables -t nat        -F POSTROUTING

iptables -t mangle      -F PREROUTING

iptables -t mangle      -F OUTPUT

iptables -X

iptables -P INPUT      ACCEPT

iptables -P FORWARD    ACCEPT

iptables -P OUTPUT      ACCEPT



}



# Begin firewall.status



statusFirewall() {



echo "iptables.mangling:"

iptables -t mangle  -v -L -n --line-numbers



echo

echo "iptables.nat:"

iptables -t nat            -v -L -n --line-numbers



echo

echo "iptables.filter:"

iptables            -v -L -n --line-numbers



# End firewall.status



}



case $1 in

 start)

 stopFirewall

 startFirewall

 ;;

 stop)

 stopFirewall

 ;;

 status)

 statusFirewall

 ;;

 restart)

 stopFirewall

 startFirewall

 ;;

 *)

 echo "Usage: sh myfirewall.sh { start | stop | restart } "

 ;;

 esac

thanks peeps you have all put my mind at rest.deep down i thought it could not harm linux,im just a bit para,once again than and linux rules i luv it.ps the company was anti virus 2009.also i googled this antivirus 2009 its a virus in its self people are having diffuclty getting it off there windows pcs apparantly it recreates its self over and over and keeps popping up, its malware lucky we use linux,he he