I'm looking for antivirus or anti-malware options for Linux besides ClamAV. What is worth considering, especially for a personal computer?
What are some good Linux antivirus options besides ClamAV?
Answers
ESET has a Linux endpoint product, though it is aimed at business customers rather than the old standalone NOD32 for Linux. That older product is no longer supported.
Check the current distribution and version requirements before buying. Commercial Linux security tools often support a fairly short list of distributions, and a product meant for managed endpoints may be more than you need at home.
Reply to this answer
Elastic Defend is another option, particularly if you want endpoint monitoring rather than just a file scanner. It uses a centrally managed setup, so check what server infrastructure you would need. That may be a lot of work for one personal machine.
Reply to this answer
For a personal desktop, I would put the basics ahead of hunting for another scanner. Keep the system and browser updated, be careful with packages from unofficial sources, and use a firewall and browser ad blocker. Network-level filtering can be useful too.
That is not a guarantee against malware. It just addresses some ways unwanted software or attacks can reach the machine in the first place.
Reply to this answer
There's also a tradeoff with antivirus itself. A scanner may run with extensive privileges and process untrusted files, so vulnerabilities in it can create another way into the system. That doesn't make every scanner useless, but it is a reason to consider what protection it adds and keep it updated.
Reply to this answer
If free and open source real-time detection is the goal, that is a tougher request than finding an on-demand scanner. Check whether a candidate actually monitors files as they are accessed, rather than assuming real-time protection from the antivirus label.
Reply to this answer
Add your answer
Answers are reviewed before publication.
z821~bitroute_6:
The distinction between a home desktop and an internet-facing server matters here. Public servers can receive hostile login attempts very quickly, even if nobody is targeting them personally.