How to Scan Your Linux Computer for Viruses and Rootkits

'Are you worried that your Linux computer may be infected with malware? Have you ever checked? While Linux systems tend to be less susceptible to malware than Windows, they can still be infected. Many times they’re less obviously compromised, too. There are a handful of excellent open-source tools to help you check if your Linux system has been the victim of malware. While no software is perfect, these three have a solid reputation and can be trusted to find most known threats.' -- source: https://www.maketecheasier.com/scan-linux-for-viruses-and-rootkits/ Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

Yikes, ClamAV's hit-rate makes me sad :( Sophos actually provide a free Linux AV scanner, which has a dramatically better detection rate than ClamAV. I'd like to see Lynis featured more prominently in articles like this. It's written by the same guy that made rkhunter, and it's very mature. Mostly used for Linux security tuning really -- checks for things like weak dhparams, HIDS, weak file permissions, etc. E -------------------------------------------- Q: Why is this email five sentences or less? A: http://five.sentenc.es On Tue, 22 Aug 2017, at 10:24, Peter Reutemann wrote:
'Are you worried that your Linux computer may be infected with malware? Have you ever checked? While Linux systems tend to be less susceptible to malware than Windows, they can still be infected. Many times they’re less obviously compromised, too.
There are a handful of excellent open-source tools to help you check if your Linux system has been the victim of malware. While no software is perfect, these three have a solid reputation and can be trusted to find most known threats.'
-- source: https://www.maketecheasier.com/scan-linux-for-viruses-and-rootkits/
Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/ _______________________________________________ wlug mailing list | wlug(a)list.waikato.ac.nz Unsubscribe: https://list.waikato.ac.nz/mailman/listinfo/wlug

Yikes, ClamAV's hit-rate makes me sad :(
Sophos actually provide a free Linux AV scanner, which has a dramatically better detection rate than ClamAV.
I'd like to see Lynis featured more prominently in articles like this. It's written by the same guy that made rkhunter, and it's very mature. Mostly used for Linux security tuning really -- checks for things like weak dhparams, HIDS, weak file permissions, etc.
Since we haven't got anything lined up for next Monday, shall we have a rundown of security tools like the once in my previous post and what Eric mentioned above? In other words, I'm looking for some volunteers that show one of the applications. :-) Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

Yikes, ClamAV's hit-rate makes me sad :(
Sophos actually provide a free Linux AV scanner, which has a dramatically better detection rate than ClamAV.
I'd like to see Lynis featured more prominently in articles like this. It's written by the same guy that made rkhunter, and it's very mature. Mostly used for Linux security tuning really -- checks for things like weak dhparams, HIDS, weak file permissions, etc.
Since we haven't got anything lined up for next Monday, shall we have a rundown of security tools like the once in my previous post and what Eric mentioned above?
In other words, I'm looking for some volunteers that show one of the applications. :-)
Any volunteers? Especially people that have used one of these tools before. - ClamAV - Sophos scanner - Chkrootkit - Rkhunter - Lynis Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

Any volunteers? Especially people that have used one of these tools before.
Alright, improvised meeting it is, since no one volunteered. Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

Any volunteers? Especially people that have used one of these tools before.
Alright, improvised meeting it is, since no one volunteered.
Got something line up for tonight, but with a completely different focus: https://www.meetup.com/WaikatoLinuxUsersGroup/events/237234829/ Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/
participants (2)
-
Eric Light
-
Peter Reutemann