Lets just go over this, and be done, at least I will be.
Blog: The Topic of AV Being Useless (+ knowing how VirusTotal actually works) " Posted by SecResponse - F-Secure
I have lately been following and participating in discussions as to whether or not antivirus products are useless and just waste of money. And as I am employed by F-Secure, my position on the matter may be rather obvious. But rather than going on with the same tired argument, I would like to shine some attention to some common patterns and misconceptions that repeat themselves in almost all discussions.
Pattern 1: Someone tries to use VirusTotal scan results as an argument.
VirusTotal is a very useful system for getting initial information about some particular sample but it does not give reliable indication about performance of various antivirus products. The folks at VirusTotal themselves know this, and they do not like their system being abused in bad research. In fact, VT has declared this for years already in their section about page. See the section called — BAD IDEA: VirusTotal for antivirus/URL scanner testing.
From VT: BAD IDEA: VirusTotal for antivirus/URL scanner testing
At VirusTotal we are tired of repeating that the service was not designed as a tool to perform antivirus comparative analyses, but as a tool that checks suspicious samples with several antivirus solutions and helps antivirus labs by forwarding them the malware they fail to detect. Those who use VirusTotal to perform antivirus comparative analyses should know that they are making many implicit errors in their methodology, the most obvious being:
VirusTotal's antivirus engines are commandline versions, so depending on the product, they will not behave exactly the same as the desktop versions: for instance, desktop solutions may use techniques based on behavioural analysis and count with personal firewalls that may decrease entry points and mitigate propagation, etc."
http://www.f-secure.com/weblog/archives/00002482.html
https://www.virustotal.com/about/
I'm afraid this little ol'
Avast4Linux scanner just scans for and picks up Windows' Viruses.
I'm certain of this as Alwil Software uses it's
Windows Virus DB.This doesn't mean there is not Malware for Linux, but the chance of getting hit but one of the 50 or less Linux Viruses is slim. Most likely less than 50.
Raising an expectation that we may find lLinux virus with
Avast4Linux scanner is wrong.
But of course there's much more to it than my generalization.
Some of many discussions on Linux Forums asked about Linux, and Viruses.http://www.pclinuxos.com/forum/index.php/topic,106246.msg907747.html#msg907747"...linux has virus but are very very few, less than 50, probably alot less than that and you need to be a target, for example be a server connected to the internet with important information that someone would want to attack, steal or damage, also you have to be running the os as root, full administrator privileges connected to internet or copy binaries or applications from internet that you don't know who did and could be a security risk
when you run with user privileges, as you should always do, you can't run any binary or app you find form internet without some basic knowledge and those apps can't do whatever they want because they need to use the privileges you have and if you are user, the apps can't do much to harm the system and as you see, this is not a simple situation compared to a windows pc where all you need to do is open a weird website to get a virus, rootkit, scamware, spyware or any other weird wonderful thing
in linux you can find avg for linux, avast and other commercial antivirus apps for free or paid versions
the problem with those is that those are meant to be used against windows virus and you are on linux so all you do is protect others from a possible virus you could copy to them
basically have a antivirus on linux is a waste of resources for around 95% of the users "
http://www.pclinuxos.com/forum/index.php/topic,101287.msg861762.html#msg861762"...No, paranoia just confuses you. Knowing about how to correctly (if not completely) secure your machine is what would put your doubts to rest. Hang on to this uncertainty and it will certainly do nothing good for you.
Read up, search, ask for expert advice on the forum ... no, viruses, malware and trojans won't be of any good even if you save them on your hard disk. Only stupid Linux users would login as root, download a dubious, unknow binary from the Internet and run it with all root privileges. We don't do that here. We don't download RPMS from unknow sources on the Internet ... and we certainly DO NOT LOGIN AS ROOT."
http://www.pclinuxos.com/forum/index.php/topic,106246.msg907843.html#msg907843"...I am not responsible for Windows users. It is their responsibility to run antivirus software. I'm not to blame if they get a virus from a file I pass on to them. I do not run antivirus software, because there are NO viruses in the wild for Linux. The only viruses that do exist for Linux are proof-of-concept instances that are only effective if you hold your mouth a certain way, stand on your head and spin around 4.5 times while singing nursery rhymes."
*How can I install AVG antivirus for linux?"...You are not in the Windows world anymore and there are no Linux viruses in the wild, or otherwise.
All attempts to create a Linux virus as "proof of concept" have also failed, in that they required active participation from the root user to install, and even then, failed to propagate.
You may believe that as Linux gains popularity there will be viruses magically appearing, but you are wrong. There's a better chance that Santa Claus will drop down your chimney to give you presents, the Easter Bunny will drop off a basket of colored eggs, or the Tooth Fairy will pay for, and come collect your lost teeth, than you will get a Linux virus.
If you insist on installing AVG, use the RPM package they provide. Unless you plan to use it to scan email to be forwarded to Windows computers, you'll find it a waste of time, effort, and resources."
How can I install AVG antivirus for linux? "...Have you checked AVG and how many 'signatures' it has for Linux viruses?
AVG, or any other such antivirus application does not protect Linux.
If your prediction comes true, in maybe 10 or 20 years time (or more), then I guess AVG and the like will adjust the capabilities of the application.
Until then .... it is a waste of resources to have it installed, thinking it somehow can or will protect Linux."
Please excuse my seemingly overwhelming response, but I'm tired of trying to please people who just because they have heard of a proof of concept virus for Linux, there exists a huge amount of viruses. This is not so, plus it scares people who want to use Linux for the first time !
Bad usage of the Security Systems in Linux is the only way you will get hacked, and maybe be injected with a Trojan, but this is such a difficult Operation that you would have to be a very important Linux Server, or Organisation to warrant such effort.Viruses attack Windows.
When you use an AV for Linux it scans only for Windows viruses, as a courtesy that you don't Email your Windows friends something (Virus) they didn't want.
I'm just simply trying to Educate. I have nothing to gain from saying there are not any Viruses for Linux. I am in no way targetting anyone, I am targetting misleading comments, which people new to Linux may be discouraged.
The reference to AVG was just as it was a topic in a thread with further information.
I'm done; if you are scared of Viruses, and want to use Linux believing you are walking into a War, similar to using Windows,
I'd advise not using Linux. As said in a quote above; "
paranoia just confuses you."
"Hang on to this uncertainty and it will certainly do nothing good for you."
Regards,
Abraxas
