Re: [gentoo-user] Which desktop antivirus?

[Pandu Poluan]

On Oct 30, 2011 1:15 AM, "Mick" <michaelkintzios@×××××.com> wrote:
>
> On Saturday 29 Oct 2011 18:26:45 Mark Knecht wrote:
> > On Sat, Oct 29, 2011 at 8:39 AM, Mick <michaelkintzios@×××××.com> wrote:
> > <SNIP>
> >
> > > The free bitdefender only offers MSWindows downloads:
> > >
> > >  http://www.bitdefender.com/solutions/free.html#System Requirements
> > >
> > > To use bitdefender for good on a *nix it seems that you have to pay
...
> > >  :(
> > >
> > > Have I got this wrong?
> > > --
> > > Regards,
> > > Mick
> >
> > Mick,
> >    At the upper left of the page you linked to there was a link to ask
> > for a free license for personal use:
> >
> > http://www.bitdefender.com/site/Products/ScannerLicense/
>
> Nice!  Thanks, I missed that!
>
>
> >    Do any folks here regularly run virus scanning on Gentoo boxes?
> > Reading through the reasons you might want to I still see lack of root
> > access and quick fixes for security problems at Linux advantages. Only
> > the fact that Linux is more widely used every day is a reason to be
> > concerned about anyone trying to attack. (I think.)
> >
> >    Do good backups of /home.
>
> I have never run an antivirus apps on any of my boxen.  Only rkhunter and
> chkrootkit.
>
> However, my other half deals with clients who sent and receive messages
from
> their MSWindows machines that are occasionally infected with malicious
> MSWindows executables.  She wants to be able to check attachments in such
a
> case, advise them and not forward further.
>
> Meanwhile, I've installed avast! and I'm now running a mammoth scan on an
ntfs
> partition.  It picked up two trojans.  I suspect that they are false
> positives, but will investigate further.  One of the files it picked up is
the
> pagefile.sys of a WinXP OS and it thinks it is a Win32:Patched-HO.
>

If pagefile.sys is detected as a malware, most likely the actual malware was
once loaded into (Windows XP's) memory got swapped, and avast! picked up its
remnant. Loaded into memory doesn't mean that the malware was active, if the
Windows XP was equipped with a good antivirus.

> Hmm .... it also thinks that some Batman Begins TS_01_0.VOB files (a back
up I
> made of a legit DVD) are "... a decompression bomb!"  Puleeeeeze!  o_O

AFAIK "decompression bomb" is just avast!'s colorful way of saying that
"this file is compressed, and I can't uncompress it to scan its contents,
because there's not enough RAM to do a decompression."

Rgds,