Is it possible for virus in windows to infect ubuntu?

5

1

I have a triple boot, windows 7 , 8 and ubuntu. Is it possible that any spyware or virus in windows will also harm ubuntu or spy during ubuntu session ?

John Watson

Posted 2013-02-26T22:14:06.220

Reputation: 287

The old answers here are not really aging well. There are increasingly sophisticated multi-prong attacks which are designed to infect an organization and apply different tactics and execute different payloads depending on the next target they want to take over. – tripleee – 2018-04-18T07:43:40.673

Answers

13

I have to agree with MDT Guy, it is highly improbable. I'll also assume that you use the term virus - as most people - for malware in general and not a particular malware category.

  • Linux and Windows have different executable file formats (ELF vs. PE is the most usual case) - at least for binary executables
  • Most wide-spread malware these days has a "commercial" background, i.e. the authors try to gain financially from infecting your machine, be it through:
    • fraud (e.g. skimming bank data or modifying transactions)
    • selling your machine's computing power or bandwidth as one of many botnet drones
    • direct extortion, i.e. ransomware
    • there are plenty more schemes out there (check the Wikipedia article here) ...
  • Even if the malware was scripted, malware authors aren't exactly known to be too concerned about stability or compatibility (with a few notable exceptions) of their concoctions (best shown with frequently crashing Windows KM rootkits). So scripts would be one possibility for cross-platform malware. I'm not aware of anything beyond jokes.
  • Extending on the previous point, Javascript worms exist and so do rogue addins/extensions - and if you configured your favorite browser to share the profile from Windows with the Linux machine, it is possible to carry this over. Note: this won't affect plugins, as these are binary executables (see first point).
  • Bootkits would be another possible case for cross-platform malware. I haven't seem anything beyond concepts there, however. And it would be rather hard to get right given the diversity of kernel configurations on Linux.
  • UEFI malware and older variations on this theme are yet another possibility.

So again, highly improbable but not entirely impossible. You know best whether you share your browser profiles across those platforms.


One more thing. Many Linux (also MacOSX) users fall prey to the assumption that malware that doesn't have privileged access can't hurt you (which is also often cited as a reason why there "isn't" malware for unixoid systems, which also isn't entirely true). This couldn't be further from the truth. Although this prevents it from establishing a system-wide stronghold, it won't keep malware from skimming data from your personal files etc. A rogue browser extension installed in your own profile will still be as dangerous to your account as the one that can do it to all accounts. If you do your internet banking with the rogue extension installed, it makes no difference whether you are root or joe.


Partial disclosure: I work for an AV company, but won't tell which :) ... but keep in mind: Strictly speaking we can never tell whether a system is clean, whereas we can state that we didn't find anything. Every claim to the contrary is either Marketingese or is going to obsolete the AV industry as a whole quickly.

0xC0000022L

Posted 2013-02-26T22:14:06.220

Reputation: 5 091

3Upvoted for "can never tell whether a system is clean" - our policy was "Nuke it from orbit, only way to be sure". – Mark Allen – 2013-02-27T02:28:26.680

Upvoted for the same reason, and for a detailed answer. – TFM – 2013-02-27T03:12:56.603

It would be helpful to reference some examples of cross-platform worms such as Koobface, as well as others like the Nimda worm that can infect not only computers, but also peripherals (in this case, printers). – rob – 2013-05-22T16:49:10.013

2

No. This is HIGHLY improbable if not impossible. Code from one OS won't run on the other and vice versa.

MDT Guy

Posted 2013-02-26T22:14:06.220

Reputation: 3 683

Any reasoning or source you can add to your answer? As it stands now, it can be interpreted as you're guessing, or you were the one who wrote both Windows and Linux. See 0xC0000022L's answer, and you'll understand what I mean. – TFM – 2013-02-27T03:09:56.437

2

It's not likely*. Executable files for Windows exist in a specific file format that other non-Microsoft OSes are unlikely to be able to run without emulation. (Such as WINE.)

The idea is that a virus would also be written in an OS-specific format since a computer virus is merely some executable code that does something bad/without permission, and only run on an OS that can execute that format.

There's a chart, here which compares the features of several formats. You can mouse over them and/or click through them to see which OSes run them.

*Which means someone's probably done it, it just didn't catch on/wasn't practical/we just don't know about it/I just don't know about it, etc.

Back when I worked in technical support the policy for infected customers was to recommend flattening the machine and reinstalling from scratch. With two major OS types installed you're probably ok, but I'm not qualified to speak to "Oh maybe your boot sector is infected and will just reinfect the next instance Windows you install" - I really don't know anymore.

Mark Allen

Posted 2013-02-26T22:14:06.220

Reputation: 2 801

-1

I think, one virus can infect two or more OSes. Right now, my computer has a virus which located in some special area o the driver (like hard driver, or USB driver), it infects both Windows and Ubuntu. As a result, a startup disk made by Startup creator in ubuntu can't boot up a computer.

shalky

Posted 2013-02-26T22:14:06.220

Reputation: 1

-3

Windows and Linux are two different platforms.Virus,malware,rootkit cannot crisscrossed into different platforms as it is written specifically for that platform.Ubuntu latest edition is written with a spyware to track the user by Ubuntu developer.

Cyrus Dan

Posted 2013-02-26T22:14:06.220

Reputation: 1

There are numerous ways for a Linux installation to infect a Windows installation with a Windows virus. – Ramhound – 2013-02-27T15:11:34.567