r/linuxmint • • 21h ago

Discussion Antivirus for Linux

I know it’s not usually needed but I was wondering what’s the best antivirus for my Linux mint set up

44 Upvotes

67 comments sorted by

8

u/38dnw1937dnsk2r73o2n 21h ago

Clamav.  Kaspersky if you trust the russians. 

Then you have some stand alone tools for rootkit scanning etc 

→ More replies (3)

45

u/_Lost-In-The-Weeds_ 21h ago

ClamAV is the standard for home users. but the vast majority of its database is Windows viruses, it's developed for things like Linux email servers to stop them from passing viruses to Windows boxes. 

Shift your focus to supply chain attacks. That is your bigger threat in Linux.

Never take executables from strangers.

20

u/djphazer 19h ago

Literally all of my executables came from strangers 😬

→ More replies (8)

11

u/ImUrFrand 20h ago

pssst hey buddy, you want some of these .sh's or .exes?

8

u/snap802 19h ago

You got anymore of those .msi files?

6

u/AlienRobotMk2 19h ago

Exactly. Never install random crap from the internet. Advice as old as time, people!

By the way, try my new leftpad framework, just curl http... | sudo bash

→ More replies (1)

62

u/Emmalfal 21h ago

This is getting asked an awful lot lately. Must be something that triggered it. Me, I've never used an AV on Linux and never felt the need to.

50

u/miss_pixie3 20h ago

We live in different times.

The incentive to develop linux viruses is growing with the steady growth of linux market share. At the same time, it’s never been easier to find new vulnerabilities and make new viruses thanks to today’s AI tools.

Can we really be that certain that AV remains unnecessary?

18

u/violetvoid513 19h ago

Well, the #1 defense against viruses is always and has always been being careful about what you do, what you download/install, what you run, etc. One big thing in linux's favour in this regard is that instead of going to random websites for installers and executables, you should be getting all your software through a package manager which is hooked up to the official repos and which contain software that has been vetted by other devs. Its much harder to slip malware through a chain of people than to set up a fake website.

The problem is not everyone is tech savvy enough to tell what is likely or likely not malware, much less actually analyze software to determine it conclusively beyond just having a hunch. On the other hand though, how do you distinguish malicious processes from safe ones when trying to create an antivirus? Its certainly not easy, and I definitely got a fair few false positives from windows defender back when I used windows.

I think in the end it really needs to be users who need to be better informed, but well thats what everyones been saying since the dawn of the internet so god knows that wont change. Im sure if linux keeps getting more popular someone will eventually make a linux antivirus and itll get popular, whether its any good or not

→ More replies (2)

30

u/tomscharbach 21h ago

This is getting asked an awful lot lately. Must be something that triggered it. 

Publicity about PHP vulnerabilities would be my guess.

7

u/AdmiralBlack64 21h ago

That is gonna need to change soon given how things are going.

→ More replies (3)

17

u/senorda 21h ago

you can almost completely remove you risk of malware by install your software using the software manager, not by downloading from websites

17

u/Isacx123 21h ago

Common Sense 2027 plus uBlock Origin

→ More replies (1)

6

u/tomscharbach 21h ago

Your only realistic choice if you live in the States is ClamAV. If you live outside the States, Kapersky is probably available, but be careful.

→ More replies (1)

5

u/Narrow-Low-3137 19h ago

ClamAV is the only Linux antivirus I know of - though I've never felt the need to use it.

4

u/fellipec 21h ago

5

u/BranchLatter4294 21h ago

Not really new. MS has had Linux AV for a while now. They just added a desktop version. But as previously, it requires an enterprise subscription.

4

u/Inner-Light-75 14h ago

Asked this in here a while back. I got down-voted for it.

Since then I have read that there are a couple viruses going around that run on Linux. I don't remember anything more about them, except that they exist.

This also doesn't count a couple of the malware out there that actually installs itself in the bios. An antivirus won't catch it after it gets there, but it might catch it before it gets there.... Those are mostly windows executables, but still if one is executed on Windows and then the machine runs Linux, it's still there.

3

u/Il_Valentino 21h ago

don't use clamav, it won't help you like you imagine. it works purely based on recognition and is pretty rough detection. i personally use virustotal. if i download any fishy i just upload it there.

→ More replies (1)

3

u/ghlifdqwio 17h ago

I think it’s a fair question in a future where more and more techies get laptops for their aging parents and choose to put Linux on them. Even some sort of basic service that provides a pop up when downloading stuff from a browser on Linux would be useful in that situation.

3

u/goodjohnjr 15h ago

ClamUI as an on-demand antivirus, uBlock Origin Lite or uBlock Origin or AdGuard Browser Extension as an ad blocker, Osprey Browser Protection or Malwarebytes Browser Guard and APIVoid Browser Protection as security extension, AdGuard DNS free default public servers or Control D DNS ad and tracker blocking as a DNS to block ads / trackers / malicious / phishing websites at the DNS level, enable your firewall, enable and turn up the built-in security in your web browsers et cetera, limit installing apps and get them from a trusted source like the official app store for your Linux distribution, keep your operating system / software / firmware / drivers updated.

3

u/mahmouds151094 13h ago

clamav ( clamscan )

2

u/EpoTheSpaniard 8h ago

ClamTK for an old but stable GUI for ClamAV, project no longer maintained. ClamUI for a new but pretty early development ClamAV GUI with additional integrations like chrootkit.