Take the 2-minute tour ×
Ask Ubuntu is a question and answer site for Ubuntu users and developers. It's 100% free, no registration required.

Someone I know said he had put spyware on my computer. Is he talking crap? I've been using Ubuntu 12.04 for nearly 3 years now and I've never seen any type of spyware, remote keyloggers or RATS (remote access tools) and likewise, backdoors. I've searched several Ubuntu forums and nothing. Other than that Amazon thing. If they even exist, are there antivirus scanners to find, identify and remove them?

share|improve this question
3  
As spyware can be for any OS, and aren't so evident in Linux distros because of increased security and smaller market share, they certainly exist. –  Abhimanyu Jul 29 at 2:35
1  
No, you put it there yourself. markshuttleworth.com/archives/1182 , but seriously there are plenty of key loggers for linux that could be embedded in init along with a simple uploader and whatever else they want if they have physical access and would be undetected by antivirus if you are the only target. Don't let anyone you don't trust have access to your computer regardless of the OS... but chances are he is talking crap. –  technosaurus Jul 29 at 5:04
7  
Yes, but it's open-source ;) –  Thomas Levesque Jul 29 at 9:42
1  
This question was recently covered on security.SE: security.stackexchange.com/questions/63097/… –  dotancohen Jul 29 at 15:30
    
Even if there is no information on spyware for ubuntu available, your 'someone you know' could have written it themselves. Spyware can exist for every OS, ubuntu is just targeted less, because there are far more windows computers, rendering targeting Windows computers more lucrative. –  11684 Jul 29 at 20:28

6 Answers 6

up vote 21 down vote accepted

There is spyware for every operating system. It is more prevalent for windows than any other operating system because it is used more. There are around 40 known spyware applications for Linux. It is not common but it can happen. As for antivirus this is a list that may help you. Best of luck!

http://opensource-sidh.blogspot.com/2011/10/top-5-anti-virus-for-ubuntu-free.html?m=1

share|improve this answer
    
thanks. they came in really useful:) –  user310141 Jul 29 at 3:12
    
do any of these protect against backdoors, or other non-file applications? –  user310141 Jul 29 at 4:18
    
@user310141 i am not sire on anything application specific. I am sure it is listed on their website though. –  Jared Jul 29 at 11:18
2  
I think this answer to be totally misleading for newbies, as they may install some of this software and think they are safe. One can create a way to watch what's happening on another PC in linux by just typing 2 line in X config - no software can protect you from that. "Don't give anyone your user password" is a single way to be safe. –  Barafu Albino Jul 29 at 12:10
1  
@BarafuAlbino I would have thought not giving out passwords was obvious. –  Jared Jul 29 at 12:12

If your friend is familiar with programming, it is possible that he has written a custom spyware script. That is quite easy under Linux, and a common prank to play on unsuspecting friends. Because it is custom, no antivirus program may be able to find it.

Some common places to hide such scripts are the startup files in your home directory, ~/.bashrc etc.

The most straight-forward and reliable way to find such a script would be to run a compare against your latest backup before the incident.

share|improve this answer

Spyware also exists in browser apps (like those for chrome) so even if you are absolutely sure you have nothing local installed that contains spyware, if you use untrusted webapps, you can be exposed.

share|improve this answer

Yes, there is spyware-like behavior in several Unix applications.

I worry most about all the applications sending auto-update and metadata lookup requests, often with information about your computer and network activity.

You can use a tool like Wireshark to detect any suspicious network activity and track it down to which applications are sending information. If the upload is not encrypted, Wireshark will even show you the content.

share|improve this answer

If you are using a desktop computer and have a keyboard attached to it, then you should check if there is a key logger put between your keyboard and your computer.

Obviously such a key logger will not care what OS you run.

share|improve this answer

Any system can have virus.

If your friend, had direct acess at your ubuntu or know the root password, will be easy to put some keylogger in it.

Look up if he put logkeys https://code.google.com/p/logkeys/

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.