Unless a script can run the “sudo” or “su” command and then enter the appropriate password, so as to install on the system, it’s not going to get far at all.

I have been using Linux for several years. Not once, ever, have any of my Linux systems been infected with a Virus (or malware).

Additionally, I agree with other users being protected. If someone wants to run the command “rm -rf ~/” they are able to, as they are deleting their home directory. If they are insecure or do not know what they’re doing, trhen other users should be protected (that’s the point).

But again, in reality, I’ve never had to repair my Linux based PC’s (or those of my clients; who use Linux) from a virus (or malware) issue.

There’s a lot of talk about permission and how they will protect the user in Linux as long as they don’t run anything as root. But that doesn’t really protect the user, it mostly protects other users on the system. If I receive an executable it can do something like:
rm -rf ~/ (delete my entire home directory)
in a billion different ways. Bye bye years of data. Fine I can restore from backups, but that is a real pain… Sure /usr is safe, other users’ home directories are safe, but all my files are dead and gone.

Worse the virus/malware can open a TCP connection and send data to the cracker’s server. It could send him all my emails (if they are not encrypted) and any non-encrypted file I have access to. Again it can’t send him other people’s files, but do I really care about that or do I care about my personal data?

It can also install a server running on a port >= 1024 and listen and let the cracker log in to my machine. Ok this is with my permissions not root’s, but once the cracker has local access, there are often ways of compromising the system and gaining root privileges. If he can do that it’s game over for everyone! Yes I know a firewall can block this, but then you need a firewall and it is not installed/enabled on my Ubuntu/Debian systems by default.

So yeah if the user wants to be able to run executables from emails or from the internet they are at risk of all of that. I mean you can use public key cryptography and have the sender or the provider sign the package with their private key. But that just confirms that the sender/provider is really the one who generated that package, it doesn’t mean they are trustworthy.

Is there really anyone who knows all the people they get software from over the internet? Even software in source code form can do all this. I mean sure you can look through the code and find out, but there can be thousands/millions of lines of code. Sure if you get all your software from the Ubuntu or Debian servers you are fine, but I often find interesting software from other sources.

And there’s no easy fix. I mean I don’t want to be asked for confirmation by the OS each time one of my file’s needs to be deleted, or each time I make a TCP connection.

I could be wrong, and I’d love to see a system that could run arbitrary code with zero risk of hurting the user, I just don’t think that’s realistic.

XP cannot natively read the ext2 or ext3 filesystem.
Your system is supposed (in many cases) to have cookies – They are often used for session control in dynamic web sites. For example I configure my browser to remove all cookies when I close the application.
Antispyware and antivirus are two different things completely.]
I have never ever had to install antispyware applications as I do not install spyware in the first place. The permissions system in Linux makes it somewhat immune to “warez and virus” attacks. Sure there are a few Linux based viruses, but again it’s problematic because of the permissions system. To be effected negatively by such thing, you would have to be logged in and operating your system as the root account! (Which one should never do, hence the need for commands such as sudo and su). :)
I work in an environment where the best protection is an antivirus device directly connected to the network (along with the firewall). ;)

ok thanks… i was just wondering if it is possible using a avg linux anti-virus…

since i have a storage drive and it seems infected by a virus on that worthless windows OS.. of course i want a clean storage drive and the virus that i got seems to be self replicating, i mean it creates a clone of itself…

right now it seems to stop when i’m using ubuntu… but it is making me paranoid and hoping it won’t affect my linux side or i was hoping to keep my mind at ease is to eliminate it using my linux OS + avg anti-virus software…

a bit off-topic… sorry

I’m no expert, but I’ve never heard of a Linux virus. I currently do not use it on desktops, only on mail servers.
Hope this helps.

Which version of Ubuntu are you using?
Where did you get the AVG package?

Have you tried opening a terminal and issuing the command avast? If Avast is installed properly then the command will succeed in running Avast.

the desktop looks very cool and user friendly. i’ll be using this netbook for web surfing, IMing, some presentation stuff, word processing, listening to streaming audio.

should i expect any major difficulties in using ubuntu 8.04 and from what i’m reading in this discussion–i won’t need AV software since i won’t be switching to a windows based os. is that correct?

I’m a long time windows user and recent Linux convert.

My view on running an AV… People *should* be responsible for securing their own systems. I’ve always run a good AV and firewall applications, I don’t expect other people to protect me.

However… I have the knowledge to look after my self

There are Windows users out there that are ignorant. Which is defined as “Unaware or uninformed“, they may not possess the knowledge to secure themselves or the confidence to learn on their own. The may also be unable or not possess the capacity to learn this level of technical knowledge (my mum springs to mind).

So I do run an AV as I know people like my mum, who can only start Word from a shortcut on the desktop need as much help as they can get. Luckily for her I set up her system, however not everyone has access to resources like that.