2

Note: I have already posted this to ubuntu forums but I have not received an answer. I was given advice that information security is a better place for such a topic even if it's ubuntu-related

Introduction

I'm kinda new to ubuntu but I have switched to it from Windows since I have heard that it's more secure and more virus-free. In the last few months, I have read a lot about computer viruses and it probably made me a bit more paranoid.

The problem

What are the chances of getting a Remote Access Trojan (RAT)? I have noticed several times that when I left my room for a while another window/program I did not touch was opened and since my computer contains a lot of source codes, I would consider it as 'end-of-my-life' if I was infected.

Additional Information

  • I have uninstalled VNC (vino) from my machine right after the system installation

  • I have not download anything unknown from the internet, only a few well-known programs using official packages with apt-get install

  • I have not visited any websites I would not be sure about (my ubuntu is only used for programming)

  • I use ClamAV scanning tool every morning clamscan -r --bell -i /

Solutions I have already heard about but I have not really tested them

  • Using wireshark to monitor traffic (I am not experienced with using this tool I would like to know what kind of data should I be looking for)
  • I have also heard that iptables might be useful

Ending

I know that you can never be 100% sure that your computer is virus free, but I think having a RAT in your computer is kind of 'extreme virus'. To be honest, I doubt that someone would really be controlling my PC since I am sure there is no real way for him to do it, but on the other hand I'm still paranoid about this. Is there any way I can really check it and then finally close this case which eats a lot of my time searching security forums etc... ?

closed as off-topic by schroeder Sep 23 '16 at 7:57

  • This question does not appear to be about Information security within the scope defined in the help center.
If this question can be reworded to fit the rules in the help center, please edit the question.

  • Typically, you should wait to have your question migrated here from the moderators. Part of the problem here is that the question is too broad. You are seeing unusual activity and want to figure out if it is something malicious. We can't really give you a definitive answer. We are also not tech support. Is it always the same program that runs by itself? Is it always a different program? Is your ClamAV up to date? – schroeder Sep 4 '16 at 13:02
  • it is laptop so maybe a bad touchpad driver might also cause some trouble and yes clam av is up to date – Tomas Sep 4 '16 at 13:03
  • @schroeder AV is pointless on an already compromised machine, not to mention that Clam is designed to detect Windows malware (by scanning email, etc) and does not even have real-time protection. – André Borie Sep 4 '16 at 16:37
  • 1
    Please don't cross-post. askubuntu.com/questions/820791/remote-access-trojan-in-ubuntu – TheWanderer Sep 4 '16 at 19:56
  • 1
    I'm voting to close this question as off-topic because it is cross-posted and you have accepted an answer on the other post. – schroeder Sep 23 '16 at 7:57

Browse other questions tagged or ask your own question.