Question Good Free Antivirus of Ubuntu Linux

Please provide comments and solutions that are helpful to the author of this topic.
DDE_Server

DDE_Server

Level 23
Thread author
Verified
Top Poster
Well-known
Forum Veteran
Sep 5, 2017
1,253
6,584
2,169
Egypt
Hi dears
I am planning to upgrade the OS laptop for my old laptop (HP ProBook 4540s) from windows 11 24 H2 to Ubunto LTSC 24 and i an thinking for good free AI for it . What is your recommendation for Good clean and free Antivirus ??
 
  • Like
Reactions: Sampei.Nihira and Khushal
DDE_Server said:
Hi dears
I am planning to upgrade the OS laptop for my old laptop (HP ProBook 4540s) from windows 11 24 H2 to Ubunto LTSC 24 and i an thinking for good free AI for it . What is your recommendation for Good clean and free Antivirus ??
Click to expand...
Switching to Ubuntu LTS on the HP ProBook 4540s

That is a reasonable move for older hardware, since Ubuntu LTS tends to run lighter than modern Windows builds. A couple of notes before getting into antivirus recommendations:

  • There is no "Ubuntu LTSC" - Microsoft uses the LTSC naming for Windows. For Ubuntu you likely mean the standard LTS (Long Term Support) release, currently Ubuntu 24.04 LTS.
  • Linux desktop systems have a much smaller malware landscape compared to Windows, but that does not mean the risk is zero, especially if the machine is used for browsing, email, or file sharing with Windows systems.

Free Antivirus Options for Linux]

  • ClamAV - Free and open-source, widely used on Linux. It is signature-based and works well for scanning files, downloads, and email attachments. It does not include real-time protection out of the box, though ClamAV Daemon (clamd) with on-access scanning can be configured on some setups.
  • Sophos Antivirus for Linux (Free for Home Use) - Offers real-time scanning and is commonly recommended for desktop Linux use. Based on available documentation, it is a solid free option if you want something closer to a traditional antivirus experience.
  • Comodo Antivirus for Linux - Another free option, though based on community feedback, some users report it can be less actively maintained. Worth checking recent update history before relying on it.

Practical Considerations]

  • Since Ubuntu benefits from Linux's permission model and package management (installing mainly from official repos or trusted PPAs), the practical malware risk is lower than on Windows, but good habits (keeping the system updated, avoiding untrusted scripts/binaries) matter more than the antivirus itself.
  • If your main concern is scanning files before sharing them with Windows machines (e.g., USB drives, network shares), ClamAV alone is often sufficient.
  • If you want continuous real-time protection similar to a Windows AV experience, Sophos for Linux is generally the more complete free option.

In short, ClamAV is the standard free choice for on-demand scanning, and Sophos Antivirus for Linux is a good option if you want real-time protection as well. Both are reputable and widely used within the Linux community.
 
  • Like
Reactions: DDE_Server
Linux malware is rare and generally targets mail or web hosting servers.
With Osprey Web Protection and a good DNS filter like NextDNS, keep your software up to date, and avoid running `sudo` or `sh` commands on suspicious websites, you'll be fine.

DDE_Server said:
What about driver compatibility with old interfaces, such as network interfaces and graphics cards
Click to expand...

Linux Mint or Zorinos (X11 Interface / KDE Plasma or XFCE)
 
  • Like
  • +Reputation
Reactions: LinuxFan58, Parkinsond, Brownie2019 and 4 others
@DDE_Server

On Linux, you need to be more concerned about phishing than malware.
Phishing has the same chance of success as it does on a Windows PC.
So prioritize DNS-level filter lists specifically designed to block phishing, and if you decide to use browser extensions like Osprey, also use PP's specifically designed to block this threat.
 
Last edited:
  • Like
  • +Reputation
Reactions: Parkinsond, Divine_Barakah, DDE_Server and 1 other person
@DDE_Server

I have a fairly new laptop (AMD ryzen 7, 16GB, 1TB SSD), so don't know about old driver compatibility, but after 3 months my Speedometer jumped from 14.7 to 19.7 in a month.

No virus in stalled, everything runs in sandboxes.My gmail and mail from ISP are checked on virusses, but I wanted an additional check beyond my DNS (Cloudflare Zero Trust free) Google safe browsing, that is why I developed Download Sentinel (post download VT analysis).
 
  • Like
Reactions: Divine_Barakah, DDE_Server and Sampei.Nihira
LinuxFan58 said:
@DDE_Server

I have a fairly new laptop (AMD ryzen 7, 16GB, 1TB SSD), so don't know about old driver compatibility, but after 3 months my Speedometer jumped from 14.7 to 19.7 in a month.

No virus in stalled, everything runs in sandboxes.My gmail and mail from ISP are checked on virusses, but I wanted an additional check beyond my DNS (Cloudflare Zero Trust free) Google safe browsing, that is why I developed Download Sentinel (post download VT analysis).
Click to expand...
The best way to test drivers on Linux is by running the Live ISO and check everything. Then proceed with installation.
 
  • Like
Reactions: LinuxFan58 and Sampei.Nihira
@DDE_Server

LinuxFan58 said:
And .... add Download Sentinel and 3P-matrix-lite extensions to your Chromium browser. :-) :-) :-) (shameless self promotion)
Click to expand...

Yes.
The 3P-matrix-lite extension recommended by @LinuxFan58 is also very useful because it limits third-party content loaded by the browser,provided, of course, that you’re using a Chromium-based browser.

In addition to the benefit of reduced exposure to potentially harmful third-party content, you’ll also enjoy faster webpage loading times.

And, of course, your privacy will be better protected:

Blocking mode
 
  • Like
Reactions: Divine_Barakah
I didn't use antivirus software with Linux because I didn't feel the need for it; simply enhancing your browser security with appropriate extensions is sufficient, and you'll be safe. Regarding driver compatibility, older drivers weren't a problem with Linux, but newer ones might cause issues. Enjoy your Linux experience.
 
  • Like
Reactions: Divine_Barakah and Sampei.Nihira
lokamoka820 said:
I didn't use antivirus software with Linux because I didn't feel the need for it; simply enhancing your browser security with appropriate extensions is sufficient, and you'll be safe. Regarding driver compatibility, older drivers weren't a problem with Linux, but newer ones might cause issues. Enjoy your Linux experience.
Click to expand...
I also believe that using Flatpaks is safer.
 
  • Like
Reactions: lokamoka820
  • Thanks
Reactions: Divine_Barakah
Divine_Barakah said:
Do you have a link to read more about this?
Click to expand...
There is a lot of nonsence on the internet about flatpak and firejail weakening the internal browser sandbox.

Fact: flatpak makes the vertical sandbox (between browser tabs and browser processes) weaker. Firejail does this also, but does a better job because the sandbox is tailored for minimal attack surface. Most flatpak permissions set by developers are way to broad, but you reduce that easily with flatseal or CLI (with help of AI). With tailored permissions the flatpak sandbox is stronger than firejail because it is cleaner and simpler plus flatpak runs with lower permissions itself (than firejail).

Firejail ads a strong horizontal layer (between browser and OS) and a flatseal permission stripped flatpak does an even better job (in terms of protection).

TLDR: when you strip flatseal and quit the browser before doing sensitive stuff, you are safer with flatpak than without. With firejail ready to use and battle tested profiles. you are always better of (as long as you quit the browser and start a clean new browsing session before doing sensitive transactions)
 
Last edited:
  • Thanks
Reactions: Divine_Barakah

You may also like...