Re: Anti-Virus on Linux? was Re: clamav 0.95.3

[Jozsef <jozefk@gmx.com>]

Chris Boot wrote:
> On 25 Nov 2009, at 08:45, Jozsef wrote:
>
> > Willi Mann wrote:
> > > Hi!
> > >
> > > When will clamav 0.95.3 be released in volatile?
> > >
> > > thank you
> > > WM
> >
> > Hi
> > clamav is some kind of antivirus and it works on linux but you must to run it manually. I don't know the nature of viruses and rootkits for linux but for windows that woudn't be of too much help.
> > Anybody had some experience with viruses or rootkits on linux?
> > Would be glad to hear some info about that kind of things :)
>
> Bit of a thread hijack going on here but I'll bite. In my experience people tend to use ClamAV on Linux mostly to defend against viruses getting on their Windows systems, for example on a mail gateway or web proxy. That way ClamAV can stop the viruses it knows about from ever getting to the Windows machines in the first place.
>
> ClamAV also picks up a few Linux malware as well, and I'm pretty sure I've seen an on-access scanning module that plugs into ClamAV as well, but I've never used that functionality.
>
> HTH,
> Chris


Ah OK I see. People cleaning viruses from Windows system while they are 
running ClamAV on Linux :) Very interesting.

That Linux malwares are weak then, if you can clean them up without 
on-access scanning.

Guess it's not the case with rootkits, for example. But personally I 
never had an issue with viruses or anything, on Linux. At least I didn't 
notice anything like that so far. But had a problem with them so many 
times on Windows.

Didn't see that module before. If it is available, is it free?

Best,
Jozsef