Page 2 of 2
Re: Sophos anti-virus GUI / real time scanning
Posted: Fri Sep 06, 2019 4:02 am
by Devrandom
Auro Kumar Sahoo wrote: Fri Sep 06, 2019 12:10 am
First Welcome to the new world of Linux and More specifically to MX Linux.
As a windows user, every body including me when migrated to linux we bring some windows culture with us like Anti-Virus treats, File fragmentation, Installing software from here and there...
In linux you should be assured about system is very secure regarding to virus and malware infections. Windows virus are simple text files here and cant harm your system but some things you should keep in mind as mentioned mostly by
SwampRabbit. Again antivirus softwares available are not for linux, they are for windows as if you download some file which contains virus to infect windows can not do any harm to you, but if you distribute the file to anyone using Windows may tell your system is infectede as he get virus threat in his system.
One more thing you need to know and practice, Use Commonsense when on line, dont open any things shown up. Use Super user power Vigilantly and never run any code from terminal if not familiar. Rest mentioned by
SwampRabbit.
No need to get any antivirus on linux with some terms and conditions, No need any file de fragmentation and Install software from official repository only, If software not latest please wait or check testing repos.
^^^ Please TS, read this and please forget about the whole
Windows antivirus.

Re: Sophos anti-virus GUI / real time scanning
Posted: Fri Sep 06, 2019 4:39 am
by Auro Kumar Sahoo
To further emphasize my point I may request you to read the article and be assured.
https://easylinuxtipsproject.blogspot.c ... html#ID1.1
The author says
1.1. You don't need any antivirus software or rootkit removers (such as chkrootkit and rkhunter) in your Linux Mint or Ubuntu. What's more, those applications even decrease your security(!). Below I'll explain why I'm against installing antivirus and rootkit removers.
a. Antivirus is useless
A virus or rootkit can't install itself in Linux unless you let it. In order to install itself on your computer, a virus or rootkit needs your password. And that it doesn't have.
Or in case it's malware ( a script) that can execute itself in your home directory without password: you'll have to make it executable first. Any script that you download, is not executable: you have to set the executable bit of the script yourself, by hand.
If you only install software from the secured official "software store" (software repositories) of your Linux distribution, then that's a very effective barrier against malware. More than that, there are no Linux viruses or rootkits "in the wild" for end users like yourself. (The exception is viruses targeted at Linux web servers, but securing web servers is quite a different cup of tea.)
b. Antivirus introduces a dangerous vulnerability
Furthermore, antivirus (AV) software sometimes even actively endangers your system: Because AV has by definition high permissions on the system and because it's often inadequately protected against hacking.... This makes AV software an ideal target for hackers.
Antivirus applications have been designed to read and open as many file types as possible. Because every kind of file can theoretically contain a virus. Unlike ordinary applications, which can only read and open certain specific file types. For example: word processors can usually only open document related files, and no mp3 music files. For media players the reverse is true.
Because antivirus can read and open everything, and actually does precisely that during a scan, its potential vulnerability (attack surface) is much bigger. And therefore also its attraction as target for people with malicious intentions. That's not just theory; more about that at the end of section 2 on this page.
c. No real protection against zero day
Antivirus products can only protect against known threats. The claim of antivirus companies that their products offer some protection against future (as yet unknown) "zero day" attacks is misleading: the antivirus software itself is just as vulnerable to future zero day attacks as the software it claims to protect...
d. False sense of security
Furthermore, antivirus software gives you a false sense of security, which might make you less cautious about installing software from external sources.
e. Windows viruses are harmless in Linux
Virus scanners scan mainly for Windows viruses. These viruses don't work in Linux. So you don't have to worry about them, either.
f. False warnings
Virus scanners often issue false warnings. Possibly intentionally, to make the user feel good about the presence of the scanner. This sometimes induces people to needlessly damage their system, because they remove essential system files incorrectly labeled as malware.
g. Essentially, each and every app is a risk
Installing an application, any application, increases your attack surface. For example: web browsers are indispensable for browsing the web, so you take the “risk” of installing them. You accept their attack surface as the price you have to pay for using the web.
But in desktop Linux, an antivirus application is good for nothing at all. It promises extra security, but in fact it only decreases security. So why would anyone want to have antivirus in desktop Linux in the first place?
Understanding Firewalls
1.2. A firewall is a security tool that monitors and polices network traffic. You can use a firewall to protect your system from malicious incoming traffic.
and mx provides firewall pre installed. Please read user manual.
Although the author has given mint and Ubuntu as OS, but some/ many things applicable to all Linux Systems. Under same line i may ask you to read this one too:-
https://easylinuxtipsproject.blogspot.c ... s.html#ID2
(the article mentions ppas, please don’t use them on MX as mx is not based on Ubuntu, rather based on Debian)
Hope you will get some more confidence and points to use MX.
Re: Sophos anti-virus GUI / real time scanning
Posted: Fri Sep 06, 2019 2:46 pm
by Linux_
The biggest lesson for me here is not to download apps from random sources.
You can get away with that in windows as there is no mxpi but in linux world its different.
It does make things very simple for install and uninstall.
Will take me sometime to not have anti-virus. Have had that on every computer for the past 15 years but change is good!
That article does provide some interesting points.
I will just re-install mx again on my computer doesn't take long. Just installed it on my laptop :)
Thanks for all your help.
Re: Sophos anti-virus GUI / real time scanning
Posted: Thu Apr 30, 2020 4:52 am
by srmg