[PLUG] anti virus

Christopher N. Deckard cnd@ecn.purdue.edu
Thu, 20 Sep 2001 07:16:32 -0500


The Nimda/CodeRed/etc virus/worm that is going around ONLY affects 
Microsoft Windows operating systems running an unpatched version of 
Internet Information Server.

LINUX IS NOT AFFECTED

Secondly, there really isn't any kind of anti-virus software because the 
only way to "infect" a Unix box is to actually run code by hand.  If you 
want to consider someone cracking into your machine and replacing known 
binaries (ls, cat, grep, etc) with "evil" versions, then I guess you can 
consider that a virus.  There is software like Trip Wire and snort and 
some other things that do intrusion detection and in some cases 
prevention.

You also don't want to run any arbitrary piece of code that someone 
gives to you.  How do you think all these MS Outlook viruses spread?  Or 
Word/Excel macro viruses.  People need to be educated to not just run 
anything that is sent to them.

-Chris

Leon wrote:

> Is there anti virus software for mandrake linux?  does it come
> preinstalled with it?  I don't want to get hte nimda virus
> ____________________________________________________
> The Purdue Linux Users' Group (PLUG) mailing list.
> For account maintenance, go to: 
> plug mailing list  -  plug@csociety.purdue.edu
> http://csociety.ecn.purdue.edu/mailman/listinfo/plug
>