pmpatrick Posted August 12, 2004 Report Share Posted August 12, 2004 I generally don't think much about antivirus software for linux except in the context of protecting windows machines on the network. I don't think there's a real need for this kind of product on linux yet. However, I came across a free product for home users fom F-Prot: http://www.f-prot.com/products/home_use/linux/ Anybody have any experience with this? Apparently, it's included in knoppix 3.4: http://networking.earthweb.com/netsecur/article.php/3389801 Quote Link to comment Share on other sites More sharing options...
kmack Posted August 12, 2004 Report Share Posted August 12, 2004 I've used it off and on but never had it detect a thing so have gotten lazy about updating it and checking. I tend to watch more for intrusion attempts than for virus activity. I think mystified uses it some too. Quote Link to comment Share on other sites More sharing options...
DragonMage Posted August 13, 2004 Report Share Posted August 13, 2004 I have used f-prot (and its gui qtfprot) in the office. I only put it in the computers that have floppy drives in it so the person can check on viruses before giving the floppy away to someone who have windows computer. If you are a linux only user, f-prot is not worth the trouble. Quote Link to comment Share on other sites More sharing options...
papaschtroumpf Posted November 30, 2004 Report Share Posted November 30, 2004 (edited) Is this available as a Mandrake RPM? There are two front-ends for this product: qtpfprot and xfprot, is one better than the other? Any rpms? I do a lot of downloading of windows software from my linux machine and would like to be able to scan it after downloading. Also can I scan samba shares on the window machine? Another free antivirus for linux is BitDefender. Is it any better, does it have a GUI? Edited November 30, 2004 by papaschtroumpf Quote Link to comment Share on other sites More sharing options...
papaschtroumpf Posted December 2, 2004 Report Share Posted December 2, 2004 I decided to take a different approach and run it from a cron job instead, although I think I will use one of the gui for the times where I want to scan immediately after downloading (I can never remember the command line options, although I can probably come up with a generic enough alias) Quote Link to comment Share on other sites More sharing options...
paul Posted December 2, 2004 Report Share Posted December 2, 2004 I've got f-prot running on my mail server. postfix content-filter enable pointing to amavisd-new which passes thru f-prot and clamav result: A virus (Eicar-Test-Signature) was found. Scanners detecting a virus: Clam Antivirus - clamscan, FRISK F-Prot Antivirus The mail originated from: <tester@testvirus.org> According to the 'Received:' trace, the message originated at: mail01.excedent.us (crc2.excedent.us [206.158.107.157]) The message WAS NOT delivered to: <paul@mail.loudas.com>: 550 5.7.1 Message content rejected, id=14194-08 - VIRUS: Eicar-Test-Signature Quote Link to comment Share on other sites More sharing options...
papaschtroumpf Posted December 5, 2004 Report Share Posted December 5, 2004 (edited) I found this: http://www.kde-apps.org/content/show.php?content=17808 it's a "servicemenu" for Konqueror. I didn't know what a service menu was until a few minutes ago, but basically it adds a contextual entry in the Konqueror right click menu, so this adds a "scan with f-prot antivirus" entry. This is exactly what I wanted for scanning a single file "on demand" I am actually quite impressed at the breadth of this free product, you can run it as a daemon for fileserver or email server, see this page for instructions: http://www.f-prot.com/support/helpfiles/unix/ I'm satisfied with a nightly scan in a cron job plus the servicemenu mentionned above though, so I'm not going to run the daemon. Edited December 5, 2004 by papaschtroumpf Quote Link to comment Share on other sites More sharing options...
papaschtroumpf Posted December 5, 2004 Report Share Posted December 5, 2004 (edited) I'm trying to compile the QtFprot front end to play with it, but I can't get it to build. the ./configure step works fine, but when I try to make it I get the following error: libtool: link: cannot find the library `/usr/X11R6/lib/libGL.la' and it's right, I have a libGL.la in /usr/lib but the one in /usr/X11R6/lib is called libGLU.la Not sure what this means so I don't know how to fix it. edit: I found a texstar rpm here, so I might try this a try instead: http://rpm.pbone.net/index.php3/stat/4/idp...x.i586.rpm.html Edited December 5, 2004 by papaschtroumpf Quote Link to comment Share on other sites More sharing options...
papaschtroumpf Posted December 6, 2004 Report Share Posted December 6, 2004 For rhe sake of completeness I though I would add that Panda Antivirus also has a free command line virus scanner for windows: http://www.pandasoftware.com/download/linux/linux.asp Quote Link to comment Share on other sites More sharing options...
Artificial Intelligence Posted December 6, 2004 Report Share Posted December 6, 2004 two anti-virus program? Is one not enough to do scans? Quote Link to comment Share on other sites More sharing options...
papaschtroumpf Posted December 6, 2004 Report Share Posted December 6, 2004 (edited) two anti-virus program? Is one not enough to do scans? <{POST_SNAPBACK}> I meant to say that it is an alternative to F-Prot. Pick one. My personal and limited opinion is that F-Prot is the way to go. More options and the front end / servicemenus described above make it even more useful. Edited December 6, 2004 by papaschtroumpf Quote Link to comment Share on other sites More sharing options...
reb2 Posted December 7, 2004 Report Share Posted December 7, 2004 f-protect / f-secure, has been in the business of protecting from infection of virii for years for the windows server, also produce firewall / security products too. the company has a good track record in the business world, and now offers a free linux scanner !! wow gimme gimme gimme! and no i don't work for them ;0) but i have run their windows stuff, load it, configure it, and then walk away and forget it. it worked well and had auto update. http://f-secure.com/download-purchase/list.shtml for more info on their products. hope this is of use to someone. regards Quote Link to comment Share on other sites More sharing options...
reb2 Posted December 7, 2004 Report Share Posted December 7, 2004 I've got f-prot running on my mail server.postfix content-filter enable pointing to amavisd-new which passes thru f-prot and clamav result: A virus (Eicar-Test-Signature) was found. Scanners detecting a virus: Clam Antivirus - clamscan, FRISK F-Prot Antivirus The mail originated from: <tester@testvirus.org> According to the 'Received:' trace, the message originated at: mail01.excedent.us (crc2.excedent.us [206.158.107.157]) The message WAS NOT delivered to: <paul@mail.loudas.com>: 550 5.7.1 Message content rejected, id=14194-08 - VIRUS: Eicar-Test-Signature <{POST_SNAPBACK}> thats ok, both scanners are detecting the test signature pattern. although the original poster probably knows this, i was just thinking of newbies and thought an explanation was in order. it is not an actual virus, just an industry standard test file (Eicar) to check that your anti-virus software is actually performing correctly. if the software does not detect "Eicar" then its not working properly. once this is done simply remove the Eicar file from the "scanned" directories so as not to get the same result each time you run a scan, (though keep the Eicar file handy to periodically check the anti-virus programmes are functioning correctly (after updates / upgrades etc) ). hope its useful regards reb2 Quote Link to comment Share on other sites More sharing options...
Artificial Intelligence Posted December 9, 2004 Report Share Posted December 9, 2004 Found a gui program to F-prot which doesn't need KDE libary files, it's called Xfprot, and can be found here http://web.tiscali.it/sharp/xfprot/ Works like a charm! Though some files it can't scan which is also displayed on the screenshot I've attached. Quote Link to comment Share on other sites More sharing options...
papaschtroumpf Posted January 6, 2005 Report Share Posted January 6, 2005 I just realized today that even though you can autoupdate the signature file, the software itself won't tell you that it's out of date. Signing up for their "new version release" email alerts should take care of that, but I would rather see an automated notice that the software is out of date, Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.