LinuxQuestions.org
Visit Jeremy's Blog.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 11-15-2019, 10:01 AM   #16
jsbjsb001
Senior Member
 
Registered: Mar 2009
Location: Earth? I would say I hope so but I'm not so sure about that... I could just be a figment of your imagination too.
Distribution: Currently OpenMandriva. Previously openSUSE, PCLinuxOS, CentOS, among others over the years.
Posts: 3,267

Rep: Reputation: 1692Reputation: 1692Reputation: 1692Reputation: 1692Reputation: 1692Reputation: 1692Reputation: 1692Reputation: 1692Reputation: 1692Reputation: 1692Reputation: 1692

A good thing about having AV software installed on Linux is that, when you have infectable files that have come from Windows, you can scan them in Linux without risking inadvertently running any possible viruses that may be lurking on your Windows system - so it's still a good idea in my book if you also use Windows system's (especially other people's Windows system's).
 
1 members found this post helpful.
Old 11-16-2019, 09:06 AM   #17
//////
Member
 
Registered: Nov 2005
Location: Land of Linux :: Finland
Distribution: Arch x86_64 | Xubuntu 18.04 bridge | Fedora 31 | windows 10 pro
Posts: 436

Rep: Reputation: 199Reputation: 199
Quote:
Originally Posted by jsbjsb001 View Post
A good thing about having AV software installed on Linux is that, when you have infectable files that have come from Windows, you can scan them in Linux without risking inadvertently running any possible viruses that may be lurking on your Windows system - so it's still a good idea in my book if you also use Windows system's (especially other people's Windows system's).
thats a one of my main reasons to use AV.

this is my scan result from my fedora box, target were windows 10 64bit.

Attached Thumbnails
Click image for larger version

Name:	A8YBuLB.png
Views:	13
Size:	87.1 KB
ID:	31874  
 
Old 11-16-2019, 11:55 AM   #18
jsbjsb001
Senior Member
 
Registered: Mar 2009
Location: Earth? I would say I hope so but I'm not so sure about that... I could just be a figment of your imagination too.
Distribution: Currently OpenMandriva. Previously openSUSE, PCLinuxOS, CentOS, among others over the years.
Posts: 3,267

Rep: Reputation: 1692Reputation: 1692Reputation: 1692Reputation: 1692Reputation: 1692Reputation: 1692Reputation: 1692Reputation: 1692Reputation: 1692Reputation: 1692Reputation: 1692
Same here, as I still use Windows on other people's machines from time to time, and I'd never presume a Windows machine is malware-free.

Looks like you picked up an old virus (fragment), boot sector virus too.
https://www.sophos.com/en-us/threat-...0Empire-h.aspx

It just goes to show, you never know what might be out there. If Sophos AV can pick up a Windows virus that old, it'll likely be able to pick up the very latest viruses/malware - so it must be pretty good.

I should scan my USB stick just in case

Last edited by jsbjsb001; 11-16-2019 at 11:59 AM. Reason: additions
 
Old 11-17-2019, 04:06 AM   #19
//////
Member
 
Registered: Nov 2005
Location: Land of Linux :: Finland
Distribution: Arch x86_64 | Xubuntu 18.04 bridge | Fedora 31 | windows 10 pro
Posts: 436

Rep: Reputation: 199Reputation: 199
i just deleted .sys files and scanned master boot records. nothing were found after that.
... but i dont believe its a clean system, might have to reinstall, PITA
 
Old 11-17-2019, 05:29 AM   #20
jsbjsb001
Senior Member
 
Registered: Mar 2009
Location: Earth? I would say I hope so but I'm not so sure about that... I could just be a figment of your imagination too.
Distribution: Currently OpenMandriva. Previously openSUSE, PCLinuxOS, CentOS, among others over the years.
Posts: 3,267

Rep: Reputation: 1692Reputation: 1692Reputation: 1692Reputation: 1692Reputation: 1692Reputation: 1692Reputation: 1692Reputation: 1692Reputation: 1692Reputation: 1692Reputation: 1692
If my memory serves me correctly that virus you found was in pagefile.sys that Windows uses for virtual memory paging. So it would be interesting to know how it ended up there. It would suggest that you have something else that's been infected with the same virus, and given you didn't find other traces of it, perhaps something you have on a USB or other removable media somewhere?

I tried to find out more about that particular virus, but other than the link I posted before, there doesn't seem to be a lot of info about it (probably because of how old it is) - other than it's a "MBR virus". So it would be interesting to know what it does, beyond infecting the MBR of course.
 
Old 11-17-2019, 05:37 AM   #21
//////
Member
 
Registered: Nov 2005
Location: Land of Linux :: Finland
Distribution: Arch x86_64 | Xubuntu 18.04 bridge | Fedora 31 | windows 10 pro
Posts: 436

Rep: Reputation: 199Reputation: 199
Quote:
Originally Posted by jsbjsb001 View Post
...perhaps something you have on a USB or other removable media somewhere?...
yes, i am worried about that also, how safe would it be to scan usb sticks using my linux box?
 
Old 11-17-2019, 05:59 AM   #22
jsbjsb001
Senior Member
 
Registered: Mar 2009
Location: Earth? I would say I hope so but I'm not so sure about that... I could just be a figment of your imagination too.
Distribution: Currently OpenMandriva. Previously openSUSE, PCLinuxOS, CentOS, among others over the years.
Posts: 3,267

Rep: Reputation: 1692Reputation: 1692Reputation: 1692Reputation: 1692Reputation: 1692Reputation: 1692Reputation: 1692Reputation: 1692Reputation: 1692Reputation: 1692Reputation: 1692
I'd say as safe as it would be scanning your Windows partition from Linux - as long as you don't boot your system from the USB's in question, or run any programs that you might have on them, then I can't see how you would inadvertently run any viruses/malware that might be lurking on them. Therefore Linux would be immune from anything that might be there - particularly if anything that might be lurking there are Windows programs.
 
1 members found this post helpful.
Old 11-17-2019, 06:18 AM   #23
//////
Member
 
Registered: Nov 2005
Location: Land of Linux :: Finland
Distribution: Arch x86_64 | Xubuntu 18.04 bridge | Fedora 31 | windows 10 pro
Posts: 436

Rep: Reputation: 199Reputation: 199
didnt find any infected objects / mbr's on my sticks.

i am going to boot into windows, exit and rescan from linux.

Last edited by //////; 11-17-2019 at 06:18 AM. Reason: spelling
 
Old 11-17-2019, 07:36 AM   #24
//////
Member
 
Registered: Nov 2005
Location: Land of Linux :: Finland
Distribution: Arch x86_64 | Xubuntu 18.04 bridge | Fedora 31 | windows 10 pro
Posts: 436

Rep: Reputation: 199Reputation: 199
done all that^

and rescan didnt find anything on my windows installation.
i am thinking that this could have been false positive, at least i hope so.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
[SOLVED] Is an Antivirus necessary? Charlyman.7.0 Linux - Newbie 5 03-22-2014 03:48 AM
LXer: Home, Sweet Home: Sweet Home 3D 2.1 Linux Version LXer Syndicated Linux News 0 10-06-2009 04:10 PM
Antivirus survey: Do you run an antivirus program on linux? atom Linux - General 29 09-03-2009 04:22 PM
Antivirus for Lunix similar Norton Antivirus for Windows Chivozertsev Linux - Software 1 03-31-2005 08:56 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 10:19 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration