Author Topic: Question  (Read 11211 times)

0 Members and 1 Guest are viewing this topic.

Offline Abraxas

  • Avast Evangelist
  • Advanced Poster
  • ***
  • Posts: 730
  • Perseverance Furthers...
    • PCLinuxOS-Forums
Re: Question
« Reply #15 on: February 08, 2014, 08:17:26 AM »
Quote
Re-Read what I said again. I said "I don't know what an "exe" file in comparison to Linux is.
Some file must have the properities to be luanched right? Whatis that file extension? Windows is .exe or .jar.

Hence, I don't know if it's malware. 3 of the files where detected already. It came inside a ZIP folder into my Windows PC. They were included. Like for FRST to run a fixlist. It has to be in the same location.
Lets make it really simple: There has not been as yet any Linux Malware. As I said, what is found on Linux is Windows Malware.
Quote
Also, why did you bring back an old thread when it had aslready been dealt with?
In what manner was it dealt ? Did you contact as I suggested:
Avast! Support [AVAST Software a.s.] https://support.avast.com/Tickets/Submit/RenderForm

Sorry, we can't have such a slow sub-Forum as this with pending problems. I get a RSS feed, I make a suggestion, a certain amount of time goes by, you hadn't confirmed your findings with the Avast! Engineer, so I had to try to draw the conclusion.

Be very assured, as I say for the third time there are no widespread Linux Malware. We Scan to find Windows Malware, so as not to transmit what is as you'd kno already epidemic Windows Malware.

Best Regards,

Abraxas.   pclinuxos.com



Offline Michael (alan1998)

  • Massive Poster
  • ****
  • Posts: 2768
  • Volunteer
Re: Question
« Reply #16 on: February 08, 2014, 06:08:23 PM »
Hi, do you work for Avast!? I contacted them with that. Can you explain with Avast! detected them as ELF and UNIX malware? I'd sure like to know, as that isn't windows.

http://en.wikipedia.org/wiki/Executable_and_Linkable_Format

Can you explain Malwarebytes reply to me reporting it?

https://forums.malwarebytes.org/index.php?showtopic=139571#entry772499

"Malwarebytes doens't run on LINUX or UNIX thus making it look like LINUX malware. Not windows.
VOLUNTEER

Senior Security Analyst; Sys Admin (Linux); Forensics/Incident Response.

Security is a mindset, not an application. Think BEFORE you click.

Offline Abraxas

  • Avast Evangelist
  • Advanced Poster
  • ***
  • Posts: 730
  • Perseverance Furthers...
    • PCLinuxOS-Forums
Re: Question
« Reply #17 on: February 09, 2014, 01:35:31 PM »
Michael (alan1998), hey there.
With respect, I'm having trouble following you. First, I've never even heard of any spyware that affects Linux.
Linux is a very Secure Operating System.
Read this: http://www.linuxclues.com/articles/21.htm

Quote
Hi, do you work for Avast!? I contacted them with that. Can you explain with Avast! detected them as ELF and UNIX malware? I'd sure like to know, as that isn't windows.
An Avast Engineer must analyse your submissions, as the Avast Scanner made the discovery, and report to you their findings, if that's happened please post said report so we may all peruse what they had to say. Thanks.  :D



Can you give any example of the Malware you had on your System, and what it tried to do to your system. Did it report info to a IP address, or alter any System settings, or permissions ?


Please be patient, as Windows users we see Malware everywhere. It's certainly not the case with a Linux Desktop.
New Linux users just can't seem to shake the paranoia associated with Windows. But, they soon learn, that the rules are simply different using Linux as opposed to Windows.

You ask how does a programme start in Linux ? Simply, you call it by its name.
Say I want to start Firefox, I would open a Terminal, and type in ' firefox %u '.
That will launch firefox. Or I can create a 'Launcher', like a Windows Shortcut.
But I do so as a User, with restricted permissions, not as root, (Admin) which is the basis of Linux.
Not leaving a door open for a hacker to enter.

I suggest going to some Linux Forums with your Malware. I've never come across any so I'm of little help, next to useless really.
I searched this Forum, "Linux Malware" :


I did a little searching: Have you ever had or suspected malware to be on your Linux system?
http://www.linux.org/threads/malware-and-antivirus-systems-for-linux.4455/page-2#post-14801

Also VirusTotal states with all the files I checked: "Probably harmless! There are strong indicators suggesting that this file is safe to use. "  ::)

What is VirusTotal
"VirusTotal, a subsidiary of Google, is a free online service that analyzes files and URLs enabling the identification of viruses, worms, trojans and other kinds of malicious content detected by antivirus engines and website scanners. At the same time, it may be used as a means to detect false positives, i.e. innocuous resources detected as malicious by one or more scanners.
 
"As previously stated, VirusTotal also aggregates the output of a number of file and URL characterization tools. These tools cover a wide range of purposes, ranging from providing structural information about Microsoft Windows portable executables (PEs) to identifying signed software.
"VirusTotal: second opinion, not a product substitute

VirusTotal is not a substitute for any antivirus/security software installed in a PC, since it only scans individual files/URLs on demand. It does not offer permanent protection forusers' systems either. At VirusTotal we think of our service as a second opinion regarding the maliciousness of your files/URLs.

Although the detection ratio achieved by the use of multiple antivirus engines/URL scanners is far superior than that offered by just one product, these results DO NOT guarantee the harmlessness of a file/URL. Moreover, the aggregate amount of false positives of multiple solutions is higher than that of any individual scanner..."

I have not a lot more to say.
This Sub-Forum is for the Avast4Linuxworkstations, and other Server Scanners provided by Avast.
 
Read the Forum, it isn't at all like the Avast Windows Forums. In fact it's basically a dead horse as far as activity, dynamics, and innovation.  http://forum.avast.com/index.php?topic=120603.0

But it is a gateway to Avast for linux scanners.

Any reporting of viruses will need to be sent to the already meantioned;
Avast! Support [AVAST Software a.s.] https://support.avast.com/Tickets/Submit/RenderForm

Best Regards,

Abraxas