0

Last days I ran ClamTK and discovered a virus: PUA.Win.Trojan.Xored-1
Got a few time this virus-PUA and ClamAV did not detect it, but not real time APP.

My question is about Comodo AV APP for Linux (free), have you tried?

Thanks serros

serros
  • 37

2 Answers2

0

Yes, I tried all of them. And NONE of them add any value unless you sent what your scan to Windows machines in your network (in this setup Ubuntu acts as a gateway). All clam is is a waste of CPU cycles and more than often it is a scam trying to get you to hand over money for a license you do not need.

Last days I ran ClamTK and discovered a virus: PUA.Win.Trojan.Xored-1

As with all of these notices on Linux: that is a false positive. See https://github.com/jensyt/imurmurhash-js/issues/1

All these tools use Windows as their base for finding pieces of code that a virus uses. But that bit of code can also be part of a legitimate piece of software. Using it still triggers this virus warning.

As said before: Currently there is NO virus in the wild that can infect all our systems as what can happen in Windows. For us to get a virus we need to install it ourself. And as we only install from Ubuntu repositories that are virus free we don't get any.

So: keep the system updated, don't install random software or software you do not use, disable services you do not use and there is nothing to worry about.

If you use a system that hosts a webservices and databases the main issue to focus on are rootkits.

Rinzwind
  • 309,379
0

Do you mean this?

https://www.comodo.com/home/download/download.php?prod=antivirus-for-linux

I do seem to remember using it back when it was still supported. Looking at that site the release suggest it has not been updated since 2013 and the version of Ubuntu listed is 12.04. I very strongly suspect it will not run on later versions.

If memory serves it was more slick that Clamtk but did give a lot of false positives in a similar way to Clam. (See other answers.)

I keep Clamtk on my rig as I have quite a few WINE application installs and I like to think it might be useful scanning these.

david
  • 937