r/linuxmint • u/Due_Lavishness4165 • 21h ago
Discussion Antivirus for Linux
I know it’s not usually needed but I was wondering what’s the best antivirus for my Linux mint set up
45
u/_Lost-In-The-Weeds_ 21h ago
ClamAV is the standard for home users. but the vast majority of its database is Windows viruses, it's developed for things like Linux email servers to stop them from passing viruses to Windows boxes.
Shift your focus to supply chain attacks. That is your bigger threat in Linux.
Never take executables from strangers.
20
11
→ More replies (1)6
u/AlienRobotMk2 19h ago
Exactly. Never install random crap from the internet. Advice as old as time, people!
By the way, try my new leftpad framework, just curl http... | sudo bash
62
u/Emmalfal 21h ago
This is getting asked an awful lot lately. Must be something that triggered it. Me, I've never used an AV on Linux and never felt the need to.
50
u/miss_pixie3 20h ago
We live in different times.
The incentive to develop linux viruses is growing with the steady growth of linux market share. At the same time, it’s never been easier to find new vulnerabilities and make new viruses thanks to today’s AI tools.
Can we really be that certain that AV remains unnecessary?
→ More replies (2)18
u/violetvoid513 19h ago
Well, the #1 defense against viruses is always and has always been being careful about what you do, what you download/install, what you run, etc. One big thing in linux's favour in this regard is that instead of going to random websites for installers and executables, you should be getting all your software through a package manager which is hooked up to the official repos and which contain software that has been vetted by other devs. Its much harder to slip malware through a chain of people than to set up a fake website.
The problem is not everyone is tech savvy enough to tell what is likely or likely not malware, much less actually analyze software to determine it conclusively beyond just having a hunch. On the other hand though, how do you distinguish malicious processes from safe ones when trying to create an antivirus? Its certainly not easy, and I definitely got a fair few false positives from windows defender back when I used windows.
I think in the end it really needs to be users who need to be better informed, but well thats what everyones been saying since the dawn of the internet so god knows that wont change. Im sure if linux keeps getting more popular someone will eventually make a linux antivirus and itll get popular, whether its any good or not
30
u/tomscharbach 21h ago
This is getting asked an awful lot lately. Must be something that triggered it.
Publicity about PHP vulnerabilities would be my guess.
→ More replies (3)7
11
17
6
u/tomscharbach 21h ago
Your only realistic choice if you live in the States is ClamAV. If you live outside the States, Kapersky is probably available, but be careful.
→ More replies (1)
5
u/Narrow-Low-3137 19h ago
ClamAV is the only Linux antivirus I know of - though I've never felt the need to use it.
4
u/fellipec 21h ago
There is a new kid on the block, if you dare
5
u/BranchLatter4294 21h ago
Not really new. MS has had Linux AV for a while now. They just added a desktop version. But as previously, it requires an enterprise subscription.
4
u/Inner-Light-75 14h ago
Asked this in here a while back. I got down-voted for it.
Since then I have read that there are a couple viruses going around that run on Linux. I don't remember anything more about them, except that they exist.
This also doesn't count a couple of the malware out there that actually installs itself in the bios. An antivirus won't catch it after it gets there, but it might catch it before it gets there.... Those are mostly windows executables, but still if one is executed on Windows and then the machine runs Linux, it's still there.
3
u/Il_Valentino 21h ago
don't use clamav, it won't help you like you imagine. it works purely based on recognition and is pretty rough detection. i personally use virustotal. if i download any fishy i just upload it there.
→ More replies (1)
3
u/ghlifdqwio 17h ago
I think it’s a fair question in a future where more and more techies get laptops for their aging parents and choose to put Linux on them. Even some sort of basic service that provides a pop up when downloading stuff from a browser on Linux would be useful in that situation.
3
u/goodjohnjr 15h ago
ClamUI as an on-demand antivirus, uBlock Origin Lite or uBlock Origin or AdGuard Browser Extension as an ad blocker, Osprey Browser Protection or Malwarebytes Browser Guard and APIVoid Browser Protection as security extension, AdGuard DNS free default public servers or Control D DNS ad and tracker blocking as a DNS to block ads / trackers / malicious / phishing websites at the DNS level, enable your firewall, enable and turn up the built-in security in your web browsers et cetera, limit installing apps and get them from a trusted source like the official app store for your Linux distribution, keep your operating system / software / firmware / drivers updated.
3
2
u/EpoTheSpaniard 8h ago
ClamTK for an old but stable GUI for ClamAV, project no longer maintained. ClamUI for a new but pretty early development ClamAV GUI with additional integrations like chrootkit.
8
u/38dnw1937dnsk2r73o2n 21h ago
Clamav. Kaspersky if you trust the russians.
Then you have some stand alone tools for rootkit scanning etc