LinuxQuestions.org
Download your favorite Linux distribution at LQ ISO.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 11-14-2019, 10:16 AM   #1
LionHeartIV
LQ Newbie
 
Registered: Aug 2019
Posts: 20

Rep: Reputation: Disabled
Is antivirus software on a home Linux install necessary


Is it a waste of money buying a Linux antivirus?

If no, are there any run-on-demand malware/virus checkers?
 
Old 11-14-2019, 10:24 AM   #2
Michael Uplawski
Senior Member
 
Registered: Dec 2015
Posts: 1,622
Blog Entries: 40

Rep: Reputation: Disabled
Quote:
Originally Posted by LionHeartIV View Post
Is it a waste of money buying a Linux antivirus?
Two questions in one.

If an antivirus makes sense, depends to some degree on the way that your system is used and the way that other systems, more susceptible to attract viruses and malware. are connected to it; occasionally or often.

I am not aware of any closed-source commercial antivirus being “better” in a way yet to be described than what you can get for free. The question may be more complicated than I am able to deduce right now, but then, you would be asked to provide even more details about your intentions and on your current situation... Someone will shoot me, if I say rubbish.
Quote:
If no, are there any run-on-demand malware/virus checkers?
I want to know, too.

Last edited by Michael Uplawski; 11-14-2019 at 10:25 AM.
 
Old 11-14-2019, 11:06 AM   #3
LionHeartIV
LQ Newbie
 
Registered: Aug 2019
Posts: 20

Original Poster
Rep: Reputation: Disabled
Thanks for getting back...

I don't want an anti-virus sitting in the background consuming system resources if one isn't really necessary.

I a past life, I had Windows 10 and a program called Malwarebytes, which could be run ad-hoc to check to bad stuff.
 
Old 11-14-2019, 11:10 AM   #4
hazel
LQ Guru
 
Registered: Mar 2016
Location: Harrow, UK
Distribution: LFS, AntiX, Slackware
Posts: 7,574
Blog Entries: 19

Rep: Reputation: 4452Reputation: 4452Reputation: 4452Reputation: 4452Reputation: 4452Reputation: 4452Reputation: 4452Reputation: 4452Reputation: 4452Reputation: 4452Reputation: 4452
I think most Linux users use clamav if they use antivirus at all. I was always told that you don't need it unless you have Windows machines on your network or share files (for example by email) with Windows users.
 
Old 11-14-2019, 11:15 AM   #5
LionHeartIV
LQ Newbie
 
Registered: Aug 2019
Posts: 20

Original Poster
Rep: Reputation: Disabled
clamav - I'll look into it, thanks!
 
Old 11-14-2019, 08:00 PM   #6
frankbell
LQ Guru
 
Registered: Jan 2006
Location: Virginia, USA
Distribution: Slackware, Ubuntu MATE, Mageia, and whatever VMs I happen to be playing with
Posts: 19,324
Blog Entries: 28

Rep: Reputation: 6142Reputation: 6142Reputation: 6142Reputation: 6142Reputation: 6142Reputation: 6142Reputation: 6142Reputation: 6142Reputation: 6142Reputation: 6142Reputation: 6142
You may find this article helpful: https://www.howtogeek.com/135392/htg...d-when-you-do/

Several reputable AV providers offer free AV for Linux (at least for home use, depending on the provider), including Comodo, Sophos, and AVG. I normally run an AV because this is one area where having both a belt and suspenders may not be redundant.

I made a promise to myself long ago, long before I started using Linux, never to have a public-facing computer without an AV.
 
1 members found this post helpful.
Old 11-15-2019, 01:24 AM   #7
LionHeartIV
LQ Newbie
 
Registered: Aug 2019
Posts: 20

Original Poster
Rep: Reputation: Disabled
Although dated 2017, a good article link 'Why You Don’t Need an Antivirus On Linux'

Thanks!
 
Old 11-15-2019, 05:49 AM   #8
//////
Member
 
Registered: Nov 2005
Location: Land of Linux :: Finland
Distribution: Arch Linux && OpenBSD 7.4 && Pop!_OS && Kali && Qubes-Os
Posts: 824

Rep: Reputation: 350Reputation: 350Reputation: 350Reputation: 350
i use sophos antivirus. and if someone says that linux doesnt need antivirus they are wrong IMO.
if you use dual boot system as i do its good to be able to scan windows with linux antivirus program.

some ransomware uses javascript and browser exploits and therefore having antivirus checking your http/s traffic is a good thing.
Attached Thumbnails
Click image for larger version

Name:	bYO8CzU.png
Views:	20
Size:	167.9 KB
ID:	31863  
 
2 members found this post helpful.
Old 11-15-2019, 05:59 AM   #9
LionHeartIV
LQ Newbie
 
Registered: Aug 2019
Posts: 20

Original Poster
Rep: Reputation: Disabled
Sophos, okay, interesting.

I don't have a dual-boot system, just Linux, still think it's a good idea?
 
Old 11-15-2019, 06:07 AM   #10
//////
Member
 
Registered: Nov 2005
Location: Land of Linux :: Finland
Distribution: Arch Linux && OpenBSD 7.4 && Pop!_OS && Kali && Qubes-Os
Posts: 824

Rep: Reputation: 350Reputation: 350Reputation: 350Reputation: 350
Quote:
Originally Posted by LionHeartIV View Post
Sophos, okay, interesting.

I don't have a dual-boot system, just Linux, still think it's a good idea?
well, once my browser were infected with malware and those viruses loaded NSFW adverts, pop-up's and stuff like that and i were using linux, so i would say yes to anti-virus.
 
Old 11-15-2019, 06:46 AM   #11
cantab
Member
 
Registered: Oct 2009
Location: England
Distribution: Kubuntu, Ubuntu, Debian, Proxmox.
Posts: 553

Rep: Reputation: 115Reputation: 115
Generally speaking the advice that antivirus is not required on Linux still applies. On Linux the bigger threats are attacks against services and server processes. Make sure your home router has up-to-date firmware and isn't known to be vulnerable, make sure services you don't need aren't running and services you do need are secured. You may want a software firewall on your Linux box, especially if it's a laptop and you're always connecting to public wifi.

If you do want to run antivirus software (on any OS!), I'd say you should have it doing on-access scanning. On-demand is no good, any malware that does infect your system can hide itself or sabotage the AV before it runs its next scan.

ClamAV is viable but it needs some work to get it doing its job well. Third-party signatures are essential for good detection rates and it might take some fiddling to get on-access scanning working.

EDIT PS: Personally I would only bother installing antivirus on a Linux desktop if it's for compliance/regulatory requirements.
 
1 members found this post helpful.
Old 11-15-2019, 08:18 AM   #12
jsbjsb001
Senior Member
 
Registered: Mar 2009
Location: Earth, unfortunately...
Distribution: Currently: OpenMandriva. Previously: openSUSE, PCLinuxOS, CentOS, among others over the years.
Posts: 3,881

Rep: Reputation: 2063Reputation: 2063Reputation: 2063Reputation: 2063Reputation: 2063Reputation: 2063Reputation: 2063Reputation: 2063Reputation: 2063Reputation: 2063Reputation: 2063
It's important to understand that a "virus" is still a program, like any other program on your machine is a "program". The only difference with viruses is that, they are normally designed to do malicious things to your system. A virus can be written for any operating system available. The difference is the "risk" you are at, which is decided by a number of factors. Like for example, your usage habits, malware developers willingness to target the particular system you're using, etc.

It entirely depends on the risk you are at. Windows has the most desktop market share, which therefore makes it an attractive target for malware developers, because of the sheer number of targets. Also, the types of users, and specifically, people who don't have a lot of technical knowledge. So it's therefore more likely that those people will have less than secure usage habits. Linux on the other hand, as said above it's the server and embedded markets where Linux based systems have the most risk, and more precisely, what malware developers target more often than not as far as Linux based viruses are concerned. But if you aren't following best security practices, like following the "principle of least privilege", then no operating system or anti-virus software in the world can "protect" you against your own stupidity - so you should practice safe usage habits first and foremost. And not solely rely on "a program" to "protect" you from your own stupidity - that would be a mistake.

All of that said, yes there is such as thing as Linux based malware, and it's only on the rise, not the decrease. FWIW, I use Sophos AV myself, and I've never had any problem with it, and also, from the rankings of anti-virus programs I've seen, Sophos AV is right up there as far as detection rates are concerned. But it's never found any viruses on my Linux system before. Sophos AV also checks for Windows viruses too, as well as Linux based viruses. I wouldn't waste my time with ClamAV personally though...
 
1 members found this post helpful.
Old 11-15-2019, 08:32 AM   #13
ehartman
Senior Member
 
Registered: Jul 2007
Location: Delft, The Netherlands
Distribution: Slackware
Posts: 1,674

Rep: Reputation: 888Reputation: 888Reputation: 888Reputation: 888Reputation: 888Reputation: 888Reputation: 888
Quote:
Originally Posted by jsbjsb001 View Post
The only difference with viruses is that, they are normally designed to do malicious things to your system.
AND contaminate other executables on your system, which is because of user privileges (cq lack OF) harder to do on Linux systems.
There is other malware for Linux (like rootkits) but mostly they are not detected by anti-virus scanners.
 
1 members found this post helpful.
Old 11-15-2019, 08:43 AM   #14
jsbjsb001
Senior Member
 
Registered: Mar 2009
Location: Earth, unfortunately...
Distribution: Currently: OpenMandriva. Previously: openSUSE, PCLinuxOS, CentOS, among others over the years.
Posts: 3,881

Rep: Reputation: 2063Reputation: 2063Reputation: 2063Reputation: 2063Reputation: 2063Reputation: 2063Reputation: 2063Reputation: 2063Reputation: 2063Reputation: 2063Reputation: 2063
Quote:
Originally Posted by ehartman View Post
AND contaminate other executables on your system,
Is that not a "malicious thing" ? Does the word "virus" not imply "infecting something", being another program in this case ?

Quote:
which is because of user privileges (cq lack OF) harder to do on Linux systems.
...which was why I talked about following the "principle of least privilege" above.

Quote:
There is other malware for Linux (like rootkits) but mostly they are not detected by anti-virus scanners.
I never said there wasn't...
 
Old 11-15-2019, 08:54 AM   #15
//////
Member
 
Registered: Nov 2005
Location: Land of Linux :: Finland
Distribution: Arch Linux && OpenBSD 7.4 && Pop!_OS && Kali && Qubes-Os
Posts: 824

Rep: Reputation: 350Reputation: 350Reputation: 350Reputation: 350
Quote:
Originally Posted by jsbjsb001 View Post
But it's never found any viruses on my Linux system before. Sophos AV also checks for Windows viruses too, as well as Linux based viruses. I wouldn't waste my time with ClamAV personally though...
i haven't found any virii either, i just maybe 1-2 week ago installed sophos. only positives have been eicar files.
when i realized that my Firefox browser were infected i just nuked it from orbit, deleted configs/settings from /home/user folder and uninstalled/reinstalled Firefox which fixed it,that were maybe 3-5 years ago

Last edited by //////; 11-15-2019 at 08:56 AM.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Antivirus for Lunix similar Norton Antivirus for Windows Chivozertsev Linux - Software 3 02-22-2022 04:40 PM
[SOLVED] Is an Antivirus necessary? Charlyman.7.0 Linux - Newbie 5 03-22-2014 02:48 AM
LXer: Home, Sweet Home: Sweet Home 3D 2.1 Linux Version LXer Syndicated Linux News 0 10-06-2009 03:10 PM
Antivirus survey: Do you run an antivirus program on linux? atom Linux - General 29 09-03-2009 03:22 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 07:40 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration