Apple Malware and Security

Yesterday, I read an interesting article about "Flashback" malware infecting about half a million Apple computers.

While this is not new--Apple computers have been infected with malware before--, the article mentioned three elements that made the infections possible:

1. Apple's software management
When Oracle detected the problem, they issued a vulnerability fix. This fix, however, did not reach Apple users immediately because Apple keeps a tight control of its software. The official fix by Apple was issued two months after Oracle's. Two months is quite a long time, and even if you think it isn't, please remember that not all users apply updates as soon as they are ready. Maybe this is why 500,000 Apple computers are still infected. Of course, half a million computers may seem a very modest botnet compared to Windows botnets, which this year may reach about 10% of all Windows systems according to a Damballa Threat Report, but it is still a lot of computers.

2. Naivete of computer users
According to the article, the malware disguised itself as a Flash Player update. This means something like "If you want to watch this video, you must install this Flash Player update first." When users "updated" their Flash Player, they got a Flashback infection instead. Until when will computer users be easy victims of such social engineering tricks? The problem I see is that the current tendencies in computing are actually making users more and more naive. Now they just want to use the computer without thinking. That is horribly dangerous from my perspective. Any activity a person does without thinking is dangerous. If you don't want to use your brain, someone will use his/hers and will take advantage of you. If you don't want to take my word, then take a snapshot of the computer's wallpaper of any of your friends, attach any stupid error window message to it, then secretly replace the actual wallpaper with your creation, and see what happens when your friends see it.



At least one of them may fall for it because more and more people are being trained not to use their heads when they get near a computer. That is sad.



3. Overconfidence of users about their systems

Owners of Apple computers tend to believe they are immune to viruses and malware, so they take little precautions when being online. This is also true about Linux users. Again, a system may be rock solid, but the weakest part of security systems is the individual responsible for the security. If you believe that Microsoft, A/V companies, Apple, or Tux are the main, or the sole responsible for your computer security, you are the Achilles Heel of your system. That responsibility is yours!

Some systems may be stronger than others, but you must keep an eye open and learn about your system.

Malware Took over a Pendrive? Linux Goes to the Rescue

I had been away from blogging for a month. I've been working hard on several projects and, since my Linux systems work seamlessly, I've been able to concentrate all my efforts and energies in those projects.

Today, a coworker asked me for help. Her pendrive had been infected with malware and thus, her folders and files had been hijacked. The virus made them invisible (for Windows; they were perfectly visible on Linux, :P) and, as usual, there were some fake folders with the names of the original ones. Of course, the fake folders were no folders at all...they were files pointing to the virus.

What are the Windows ways to recover from that?

1. Downloading any "savemeplease" software (trial version), installing it, and then running it.
2. Running a very good antivirus while hoping it will make things normal again.
3. Using the Windows command line to correct the problem.

Well, I decided to use the third option, just for the sake of trying it. I ran cmd.exe.

Then, I tried the "attrib -a -h -r -s" trick...

Hmmm...it didn't work. Perhaps I should have chosen option 1?

Well, instead, I just used my Linux system to copy the folders from the pendrive and back. In this case, I didn't need anything else. The magic was done. Right, just by doing that.

Hey Windows users, Linux doesn't bite. The penguin is friendly and it certainly can help you a lot. I don't even remember the last time sweat ran down my temples and I hesitated before plugging my pendrive into someone else's PC.

Doing Your Work...on a Broken PC!!

Lately, I have been too busy with work and life, so I haven't been able to explore or experiment my Linux systems. On top of that, they keep working as expected, so I haven't posted much these days, either.

An interesting experience for keeping here, though, is the one a respected colleague is currently going through.

About a month ago, he got hit by a nasty virus and his PC went dead as a brick. It would not start at all and the technician advised him to format and reinstall his Windows XP system.

This colleague also happened to have with him a Mepis Linux 8.0 Live CD. Using it, he has been able to go online and do all his work without a problem. Since he is not much into tech stuff, he runs everything off the live session, with no installation.

So it turns out that my colleague has been using what most people know as "a broken PC" and has been able to do his work. For the world, his PC is dead, but it still walks, moves, and does whatever it is told without hesitation.

It seems that the idea of "ZOMBIE" can be quite rewarding in the world of Linux.

What Is Going On Lately?

The semester is almost over and the best word to describe the atmosphere around here is hectic.

Still, I've been able to notice a few cases for personal analysis and meditation:

1. A colleague's computer got useless due to a virus:

Well, not the computer. The computer is still functioning perfectly...at least as long as he keeps using his Mandriva Live CD. What got useless was his XP system. Oh, yes, I can almost hear Windows fanbois saying that it is all my imagination and that it is because the user was "extremely unlucky" or "too stupid to run A/V or anti-malware software." This one is VERY careful about security updates and runs all kinds of anti-malware programs under the sun, so he must be one of those in the "unlucky" group. Anyway, this unlucky colleague called me and told me that thanks to Mandriva, he could get his job done. That is doubly important considering the university's present times.

The question here is why if he is using Mandriva without any problem, he still wants to use XP. Because it is better? Because it is an OS that lets you get your job done? I have my hypotheses. Anyway, if he wants to keep using Windows, I think he should install Vista/7. Oh, wait. That's not necessary because XP is still well supported by Microsoft until 2014, or not?

2. Another colleague's computer got infected and is on its way to HD formatting.
Wow! Another unlucky one! Well, this has less to do with luck and more to do with plain statistics if we consider that the campus and its surrounding photocopy shops are among the most dangerous places concerning USB safety. You can actually get a pretty nasty USB malware collection in a 10-minute-walk. It doesn't matter what A/V you are running or how updated you think it is, this is Virus Land. You could play Russian Roulette with your system after plugging your USB stick into any shop's PC here or you could try another approach. How about cleaning your USB using a Linux Live CD and a few clicks?

3. Another Toshiba laptop with Windows 7 Starter started acting up.
I don't know what's happening. As ironical as it sounds, it seems that Starter decides all of a sudden not to start. Is it Toshiba? Is it Starter? I actually don't care; I use Linux. Let those who use Starter care and fix their problems right at Microsoft's Headquarters, because unlike Linux users, these computer owners do have the solid support of Microsoft, right?

4. Three more students have told me they want to install Linux.
One of them said that he'd settle for Ubuntu Natty Narwhal because its desktop was amazing. While Unity does not sum up what I consider an amazing desktop experience, I must recognize that many others do love Unity. I am more from the old school, I'd say. Having a computer behave as a giant cellphone does not sound fun to me, call it Unity, Gnome 3, or KDE Netbook. Now, if this student likes something like that, good for him. It's his call.

5. A colleague experienced a moment of "File-Type Madness" while teaching in a workshop.
She had made her multimedia presentation with PowerPoint 2007 and unknowingly saved it as a .pptx file, the default format. However, when she tried to open it on one of the university's laptops, she learned something the hard way: compatibility was not one of Microsoft's top priorities when pushing their new format. She had to use instead her tiny netbook, which runs Mandriva, and could use the presentation, albeit not 100% compatible with Open Office.
You see? That's why standards are important. That also highlights the importance of using our software with a critical eye instead of trusting it blindly.

Usuarios de Windows: ¡¡¡Zeus va tras su dinero!!!

¡Estos dos últimos meses han sido un período bastante duro para los usuarios de Windows! El mes pasado, la amenaza del gusano W32.Stuxnet, que se propaga por medio de aparatos USB, se descubrió atacando plantas industriales...
Ahora, el recién llegado este mes es la nueva versión de Zeus, un troyano y keylogger que aparentemente contiene tecnología anti-piratería al estilo Windows (??!!) y ha vaciado ya $1 millón de cuentas bancarias en el Reino Unido! ¡Wow! ¡Parece que ahora hasta los dioses griegos quieren competir con Microsoft para obtener el dinero que posean los usuarios de Windows!
Este troyano Zeus (tan paradójico como pueda sonar...¡¡¿¿el dios griego como un troyano??!! ¡Bueno!) se puede obtener, de acuerdo con el artículo, ya sea visitando un sitio Web legítimo que alberga secretamente el malware, o un sitio diseñado para albergarlo, o un sitio legítimo que albergue el malware en los anuncios. También menciona que el ataque primario vino por medio de anuncios infectados, incluyendo anuncios enviados por Yieldmanager.com, de Yahoo. ¡Esa es de hecho mala publicidad! Luego, Zeus actúa como keylogger y como ladrón de contraseñas, pero hace más que eso: prueba todas las debilidades que conoce en la máquina víctima para lograr una infección exitosa.
Ah, pero hay más: "cuando el usuario accesa el sitio Web de su banco, el troyano transfiere la identificación de acceso, la fecha de nacimiento y el número de seguridad al servidor de control y manejo. Una vez que el usuario accesa la sección de transacciones del sitio Web del banco, el troyano recibe un nuevo código JavaScript del servidor remoto para reemplazar el JavaScript original del banco usado para la forma de la transacción.

Cuando el usuario interactúa con la forma para realizar una transacción legítima, el troyano trabaja oculto para manipular la transacción. Primero revisa el balance de la cuenta y si sobrepasa cierta cantidad, determina cuánto sustraer dentro de un límite para no activar las alarmas automáticas de detección de fraudes".

Queridos usuarios de Windows: es hora de que consideren seriamente realizar sus actividades bancarias en línea de manera segura. ¿Temen que si instalan GNU/Linux en sus PCs les acarreará la ira de Microsoft a ustedes y a sus familias por tres generaciones? ¿Qué tal usar un buen Live CD de Linux, entonces? GNU/Linux no muerde, ¿saben? Aún si lo hiciera, no se puede comparar a darse cuenta algún día que uno fue víctima del crimen por Internet. ¿Están dispuestos a esperar que alguien les vacíe sus cuentas para actuar?

Windows Users: Zeus Is after Your Money!!!!

These two months have been such a tough period of time for Windows users! Last month, the menace of W32.Stuxnet worm, which spreads through USB devices, was discovered targeting industrial manufacturing plants...
Now, the newcomer this month is the newest version of Zeus, a trojan and keylogger which apparently contains Windows-like anti-piracy technology (??!!) and has already emptied $1 million from bank accounts in the United Kingdom! Wow! It seems that now even Greek gods want to compete with Microsoft for the money that Windows users may have!
This Zeus trojan (as paradoxical it may sound...The Greek God being a Trojan??!! Oh, well!) can be obtained, according to the article, by either visiting a legitimate Web site that is secretly hosting the malware, or a site designed to host the malware, or a legitimate site hosting the malware in an advertisement. It also mentions that the primary attack came through malicious advertisements, including ads delivered by Yahoo's Yieldmanager.com. That's bad advertising indeed! Then, Zeus acts as a keylogger and a password stealer, but it also does more than that: it tests the victim machine for each exploit it knows in order to get a successful infection.
Ah, but there's more: "When the user accesses his or her bank Web site, the Trojan transfers the log-in ID, date of birth, and a security number to the command-and-control server. Once the user accesses the transactional section of the bank Web site, the Trojan receives new JavaScript code from the outside server to replace the original bank JavaScript used for the transaction form.

When the user interacts with the transaction form for legitimate business, the Trojan works behind the scenes to manipulate the transaction. First it checks the account balance and if it is over a certain amount it will determine how much to steal within a limit so as not to trigger automatic fraud detection alarms."

Dear Windows user: it's time you seriously consider doing your online banking safely. Are you afraid installing GNU/Linux on your PC will bring Microsoft's wrath on you and your family for three generations? How about a nice Linux Live CD, then? GNU/Linux doesn't bite, you know? Even if it did, it can't be compared to realizing someday you were a victim of Internet criminals. Are you willing to wait until someone empties your account to act?

Usuario de Windows: ¡son sus virus, es SU problema!

¿Necesitan antivirus los usuarios de Linux?
Las opiniones tienden a dividirse en este tema, pero algunos usuarios de Linux dicen que poseer y ejecutar un antivirus puede ser útil en caso de que tengan que enviar un archivo que por casualidad esté infectado.

A esta altura, algunos usuarios de Linux podrían replicar "Hey, los virus no me afectan. ¿Por qué tendría que importarme lo que le pase a alguien que usa Windows? ¡Son sus virus; es su problema!"

Cierto. La mayoría de los virus--no todos--ataca a Windows. Los usuarios de Linux estamos más seguros. Para la mayoría de los que usan Windows, en especial si confían en el IE, entrar en línea es el equivalente de tomar una tabla de surf para cruzar un río lleno de cocodrilos, tiburones y pirañas. Dichas amenazas son para Linux tan peligrosas como peces dorados--¡sin embargo, cuidado...los peces dorados pueden morder! ;)

Veamos, una computadora con Windows infectada envía un archivo lleno de virus a un usuario de Linux. El terrible virus Tiburón.exe se convierte en Pezdorado.inútil en Linux. No obstante, si el usuario de Linux reenvía el archivo a un usuario de Windows diferente, Pezdorado.inútil se transformará de nuevo en Tiburón.exe y causará estragos en la nueva playa a la que arrive.

¡Qué pena por el usuario de Windows! Es su culpa por no actualizar su anti-tiburones, quiero decir, anti-virus (no quiero meterme en problemas con los activistas a favor de los tiburones). El virus no afectó a Linux en todo caso, así que ¿por qué los usuarios de Linux deberían preocuparse por lo que pase si sus archivos están infectados con virus para Windows?

Esa actitud me recuerda lo que otros bloggers llaman el Ku-Tux-Klan: solamente Linux cuenta y aquellos que no son parte del movimiento merecen morir a merced de sus virus y malware.

Sin embargo, eso no es lo que he aprendido del sentido de comunidad de Linux. Tal vez tuve suerte al escoger una distro con una comunidad amable y que apoya. Tal vez aún soy demasiado inocente. Tal vez aún tengo presentes mis días como usuario de Windows y todo el sufrimiento que pasé entonces. Cualquiera que sea la razón, creo que Linux, como comunidad, no debe ser cerrada y elitista. No quiero ser parte del Ku-Tux-Klan. Linux me ayudó; quiero ayudar a otros por medio de Linux. Si ellos migran o no, es su decisión y si no lo hacen, no me da el derecho de enviarles virus.

No. no estoy ayudando al enemigo porque los usuarios de Windows no son mi enemigo. Tampoco estoy condescendiendo falsamente a Windows. Pensemos de nuevo. ¿Qué pensaría un usuario de Windows?

"Mi buen amigo que usa Linux me envió un virus. Por supuesto, como los virus no afectan a Linux porque los archivos .exe son inútiles ahí, él no tiene antivirus, así que es muy probable que mi amigo ni siquiera se enterara que había un virus oculto en el archivo. ¡Ay de mí! ¡Es mi culpa y la de Windows! Ahora tengo que ver cómo salvo lo que quedó de mi computadora o como detengo la fuga de información. Nota mental: debo conseguir Linux para la próxima."

Probablemente concordarán con que dicha escena está lejos de lo que un usuario promedio de Windows pensaría, ¿verdad? Sencillamente no ocurriría; ¡ni siquiera en los sueños más absurdos de Tux!

Entonces, ¿Qué pensarían los usuarios de Windows?


"Mi amigo amante de Linux es tan egoísta. ¡Como está a salvo de los virus, no le importa lo que nos pase a los que sí nos afectan!"

Todavía no es eso. Sus pensamientos serán muy probablemente como este:

"¡Maldición! ¡Linux no es tan bueno porque mi amigo que lo usa me envió un virus que me destruyó el disco duro! ¡¡Maldito Linux; es peor que Windows: mi Windows al menos detiene los correos infectados!!"

Enfrentémoslo: si no hacemos nada por combatir los virus, tampoco estamos haciéndole un favor a Tux. Además, todos somos parte de la misma comunidad de usuarios de computadoras. Cerrar las puertas de nuestro feliz castillo como lo hizo el Príncipe Próspero de Poe ciertamente causará que la Muerte Roja se escabulla dentro de nuestra morada y nos elimine.

Windows user: it's your viruses, it's YOUR problem!!

Do Linux users need an antivirus?
Opinions tend to be divided on this issue, but some Linux users say that having and running an antivirus may be handy in the case Linux users have to send a file that happens to be infected.

At this point, some Linux users may say "Hey, viruses don't affect me. Why should I care what happens to someone using Windows? It's their viruses; it's their problem."

True. Most viruses--not all--target Windows. We Linux users are safer. For most Windows users, especially if they rely on IE, going online is the equivalent of taking a surfboard to cross a river full of crocodiles, sharks, and piranha. Those threats are for Linux as dangerous as goldfish--careful, though...goldfish may bite! ;)

Let's see, an infected Windows computer sends a virus-infested file to a Linux user. The terrible virus Sharkattack.exe will become Goldfish.useless in Linux. However, if the Linux user resends the file to a different Windows user, Goldfish.useless will morph again into Sharkattack.exe and cause havoc at the new shores it reached.

Sorry for the Windows user! Shame on him/her for not having an updated Shark killer, I mean, antivirus (I don't want to get in trouble with Save the Shark activists.) The virus did not affect Linux anyway, so Linux users shouldn't care what happens if their files are infected with viruses for Windows.

That attitude makes me think of what other bloggers call The Ku-Tux-Klan: only Linux counts and those who are not part of the movement deserve to die in the hands of their viruses and malware.

However, that is not what I have learned from the sense of community in Linux. Maybe I was lucky to pick a distro with a nice, supportive community. Maybe I am still too naive. Maybe I still have present my days as a Windows user and all the suffering I underwent. Whatever the reason is, I feel Linux, as a community, must not be a closed, elitist one. I don't want to be part of the Ku-Tux-Klan. Linux helped me; I want to help others through Linux. If they migrate or not, it is their choice and if they don't, that does not grant me the right to send them viruses.

No. I'm not helping the enemy because Windows users are not my enemy. I'm not patronizing Windows, either. Let's think again. What will the Windows user think?

"My good Linux-loving friend sent me a virus. Of course, since viruses do not affect Linux because .exe files are useless in Linux, he/she does not have an antivirus, so chances are my friend didn't even know there was a virus hidden in the file. Poor me! Shame on me an on Windows! Oh, now I have to see how I save what was left of my computer or how I stop my info to be leaked. Mental note: get Linux for next time."

You will probably agree that such scenario is far from what an average Windows user will think, right? That simply won't happen. Not even in Tux's wildest dreams!

So, what will Windows users think?


"My Linux-loving friend is so selfish. Since he/she is safe from viruses, he/she does not care about those of us who ARE affected by viruses!"

Still not quite. His/her thoughts will be most likely like this...

"Damn! Linux is not so good because my friend who runs Linux sent me a virus that thrashed my drive! Damn Linux; it's worse than Windows: my Windows stops infected mails at least!!"

Let's face it: if we do nothing to help fight viruses, we are not helping Tux either. Besides, we all are part of the same community of computer users. Closing up the gates of our happy castle as Poe's Prince Prosper did will certainly cause the Red Death sneak into our dwelling and kill us.

Linux Equals Peace of Mind!

Why should someone migrate to Linux? Many people wonder the same and many others have already answered the question from all possible angles under the sun. Still, Linux advocates sometimes get frustrated because a great deal of users are undecided or prefer to ignore all the advantages of a migration and, bearing all the flaws of their current OS, stick with it stoically, very much like this:

A: With Linux you can literally design your own desktop!
B: I envy you so much...I am tired of the limitations my OS comes with!
A: Then, why don't you switch to Linux?
B: Because learning a whole new system is too troublesome.
A: It isn't so hard! You'll get used to it in no time.
B: I don't know...I don't have much time.
A: But aren't you tired of system failures and slow performance?
B: I'm fed up with all that, you bet! Blame it all on the viruses!
A: Then...?
B: What can I do? That's how life is!
A: It is not like that. Did you know that Linux is safer and with it, you don't even need an antivirus?
B: Really? Wow! That's REALLY cool! By the way, you just reminded me I gotta download my antivirus updates! Gosh, I'm three days behind; it'll take a while! Better do it right now...see ya!
A: ???!!!
----

I can only say that since I run Linux, I am able to sit down and work on my computer with complete peace of mind. Today I had to print a document on my way to work, so I used a computer from a shop. As soon as I introduced my USB drive, a virus clung onto it. When I reached my office, I turned on my little netbook and in less than a minute, I got rid of the pest, whose name was "NICE." Right, VERY nice! A couple of hours later, an ex-classmate visited me. He told me about several useful software tools--for windows--and wanted to show me his accomplishments with them. Not to my surprise, his USB memory was infected with the infamous virus RECYCLER (which I used to fear a lot). I deleted the pest from my friend's USB device and that was the only explanation he needed to get interested in Linux. He is indeed a clever guy...

Again, that's probably what I value the most of Linux: it lets me relax and fear nothing whenever I insert an infected device into my computer's USB ports. Linux even gives me the chance to do some community service by cleaning up viruses that could cause a terrible moment to my friends or colleagues. It feels good to help people, you know?

Los virus de las memorias USB...

En los años del dinosaurio, uno podía sellar los diskettes contra escritura, lo cual impedía la propagación de los virus de entonces, tan fósiles hoy como los diskettes.

En la actualidad, los virus de las llaves USB son mucho más molestos que sus predecesores de los "floppy disks". Es prácticamente imposible impedir que entren a las memorias como bucaneros que asaltan una embarcación desarmada. De nada sirve bloquear el archivo autorun.inf. Tampoco los detienen los antivirus fijos ni los "portables".

Y como si fuera poco, estos pequeños truhanes son maestros del disfraz: a veces ocultan los archivos verdaderos y los suplantan descaradamente. De esa manera, el inocente usuario los ejecuta pensando que está ejecutando sus archivos verdaderos. En otras ocasiones, destruyen todo el contenido de las llaves USB. Normalmente,los diminutos malandrines se protegen con la capa de invisibilidad de Harry Potter para deambular por todo el castillo sin ser detectados, pues saben que no existe el Mapa del Merodeador que los descubra...

¡FALSO! ¡El Mapa del Merodeador SÍ existe!

Ayer, una colega que tuvo problemas con su llave USB me la trajo para que la revisara. Según su computadora, la llave presentaba problemas y no podía abrirse, aunque podía guardar. Intentó repararla pero el esfuerzo fue infructuso.

Introduje la memoria en mi modesta netbook que funciona con SimplyMepis Linux y...

El contenido se pudo visualizar sin problema: estaban los archivos más recientes que ella había guardado...y junto a ellos, un par de misteriosos archivos ejecutables de nombres ilegibles, el archivo autorun.inf y una carpeta invisible. Eliminé el archivo autorun.inf y probé la llave en otra computadora con Windows XP. ¿El resultado? Logró visualizar el contenido de la memoria, pero solamente presentaba los archivos guardados posteriormente a la infección.

De nuevo en Linux, mi colega pudo ver otra vez los archivos invisibles...se veían muy cómodos en su memoria USB...¡Linux es el Mapa del Merodeador!

Paso siguiente, cambiar los permisos de los archivos (estas pestes normalmente se protegen prohibiendo su modificación) y el resto fue solamente eliminarlos.

Fácil, rápido y SIN ANTIVIRUS. ¿Qué más puedo pedir?

¿Por qué uso SimplyMEPIS Linux?

Es cierto. La pregunta revolotea en las mentes de los felices usuarios de Windows XP o Windows 7 (¡Dudo que los usuarios de Vista sean tan felices!)

Si los productos de Microsoft son tan buenos, ¿por qué hay gente que se decide por MAC/OS y por qué hay otros que se deciden por Linux?

En mi caso, una de las razones por las cuales migré a Linux es tal vez la más simple. La voy a explicar con una anécdota...

Hoy, este blog nació durante un taller de blogs. Nació rápido y sin contratiempos desde un frío laboratorio de cómputo que funcionó cual modesta sala de partos. Junto a "La Esquina de un Migrante a Linux", nacieron otros 17 blogs; todos tan distintos como sus creadores. Debería más bien decir "creadoras", pues solamente había allí dos asistentes varones: Mechatotoro y yo.

Con el fin de grabar información, introduje mi unidad de memoria USB en la computadora. Dos segundos después, cual espectro maligno atraído por jóvenes inexpertos durante una improvisada sesión espiritista, apareció una pantalla roja frente a mí: el antivirus se había activado y me advertía que había detectado un virus en el archivo "autorun.inf" de mi memoria USB.

Dicho anuncio me hizo sonreír. Mi memoria USB no tenía ningún archivo "autorun.inf" porque yo lo había borrado con Mepis Linux mucho tiempo atrás. ¿De dónde provenía esta alerta, entonces? Simple: la computadora, cuyo sistema operativo es Windows XP, estaba infectada y por supuesto, infectó mi memoria USB también. Por fortuna, el antivirus estaba actualizado y se encargó rápidamente de limpiar el virus...

Al menos eso fue lo que me dijo.

De regreso en mi casa, encendí mi computadora, la cual funciona con SimplyMEPIS Linux. Inserté mi memoria USB y...¡Sorpresa! ¡Allí estaba! Aferrada como una garrapata a la piel de un animal de granja, se encontraba entre mis directorios una carpeta invisible con el nombre "trash". Dentro de la misma, protegida tanto por la invisibilidad (en windows, porque linux no cede ante tal artimaña) y por ausencia de permisos que impedían modificar o borrar su contenido, se hallaba el virus en un pequeño archivo ejecutable. A su lado, pude ver el archivo "autorun.inf", enhiesto cual gallardo guardaespaldas.

¿Qué hubiera necesitado en Windows para deshacerme de esa carpeta de Pandora?
1. Suerte para poder visualizar la carpeta invisible
2. Un antivirus más potente que el del laboratorio de cómputo
3. Actualizaciones para el antivirus
4. Mucho tiempo para correr el antivirus tanto en la memoria USB como en la computadora para asegurarme que no haya infecciones.

¿Qué necesité en Linux para deshacerme de la carpeta maligna?
1. Saber que yo no la había creado
2. Modificar los permisos de la carpeta y los archivos
3. Seleccionar la carpeta y oprimir las teclas Mayúsculas+Suprimir
4. Un par de segundos para ver la carpeta desaparecer en el olvido.

Todo el proceso no me tomó más de un minuto.

Esa es una de las razones más simples, pero más grandes, por las cuales migré a Linux: me brinda la libertad de trabajar donde sea sin temor a los virus demoniacos que se posesionan de las computadoras...aun cuando éstas están "bien protegidas" por sus antivirus. Linux me permite exorcisar los demonios de mi memoria USB sin necesidad de crucifijos labrados en oro o balas de plata que se desgastan con cada puesta de sol y al día siguiente son inútiles.

No estoy exagerando: ¡un día exorcisé 14 virus diferentes de la memoria USB de una joven!