Question What antivirus for Fedora?

[IoSonoPiero]

Hello guys,
I know that ClamAV is a choice, but I'm wondering if there are other antivirus I can put on a Fedora machine to check files (mainly related to Microsoft world).
I've seen that, for instance, Eset Endpoint has a high price compared to other AVs.
Does someone have experience with that?

 

[Bot]

Hello,

Besides ClamAV, another popular antivirus for Fedora is Sophos Antivirus. It offers reliable protection against various malware, including threats related to Microsoft Office files.

As for Eset Endpoint, while it is indeed a robust antivirus solution, it may not be the ideal choice for individual users due to its higher price point. However, it is often utilized in business environments where advanced features and centralized management are required.

Ultimately, the choice of antivirus software will depend on your specific needs and budget. It's always a good idea to research and compare different options before making a decision.

 

[ForgottenSeer 97327]

@Bot Free Sophos for Linux is discontinued

 

[eonline]

What antivirus for Fedora?
Simple answer: No antivirus needed, even for MS related stuff.
Use online malware analysis if you think/find any suspicious.

 

[IoSonoPiero]

What antivirus for Fedora?
Simple answer: No antivirus needed, even for MS related stuff.
Use online malware analysis if you think/find any suspicious.

Yeah, but I'd like something more "local" than online.

 

[ForgottenSeer 97327]

@ghale
I tried ClamAV, but it found less than 60% while I am not a tester, so I only got my hands on free available malware (warning) streams (meaning the samples were not super fresh). I now check with VT before adding files in mail (like @eonline suggested).

 

[IoSonoPiero]

@ghale
I tried ClamAV, but it found less than 60% while I am not a tester, so I only got my hands on free available malware (warning) streams (meaning the samples were not super fresh). I now check with VT before adding files in mail (like @eonline suggested).

Ok, ok.
Thanks.

 

[Zartarra]

You can use chkrootkit (chkrootkit -- locally checks for signs of a rootkit) for detecting rootkits.

Comodo has a AV for Linux but I never used it before (5 Best Antivirus for Linux 2022 | Linux Antivirus).

There a several vendors that offer AV protection for Linux. Most of them are payed products (F-secure, BitDefender, Kaspersky, Avas, Eset).

 

[eonline]

CIS Downloads

Guidance for hardening systems like Fedora.

=)

 

[IoSonoPiero]

Guys, guys, thanks!!!

You can use chkrootkit (chkrootkit -- locally checks for signs of a rootkit) for detecting rootkits.

Comodo has a AV for Linux but I never used it before (5 Best Antivirus for Linux 2022 | Linux Antivirus).

There a several vendors that offer AV protection for Linux. Most of them are payed products (F-secure, BitDefender, Kaspersky, Avas, Eset).

Comodo needs to be compiled to run but there are a lot of issues doing that. I tried it without success.
I unluckily don't run Ubuntu, where everything seems to run

 

[Ink]

Yeah, but I'd like something more "local" than online.

Have you considered "passive protection" for Linux?

Examples

• uBlock Origin or Adguard Adblocker extension with malware protection lists
• Google Safe Browsing (Chrome, Firefox)
• Defender (SmartScreen) for non-Edge (Linux) browsers
• Malwarebytes Browser Guard extension
• DNS based protection (Quad9, NextDNS)
• VPN with content blocking

A lot of them are free, or are low-cost to run without taking up many resources and can proactively block harmful content.

 

[IoSonoPiero]

Have you considered "passive protection" for Linux?

Examples

• uBlock Origin or Adguard Adblocker extension with malware protection lists
• Google Safe Browsing (Chrome, Firefox)
• Defender (SmartScreen) for non-Edge (Linux) browsers
• Malwarebytes Browser Guard extension
• DNS based protection (Quad9, NextDNS)
• VPN with content blocking

A lot of them are free, or are low-cost to run without taking up many resources and can proactively block harmful content.

Hello,
I use most if not all of those.
So,
Maybe I'm ok, I hope.

 

[R3j3ct]

Hello,
There is the option of adding 3rd party signatures to clamav to improve detection rate. Look to SaneSecurity, SecuriteInfo, MalwarePatrol, Malware Expert.

 

[ForgottenSeer 107474]

Passive protection for Thunderbird/Betterbird

I have added the Add-On called " Warn Attachment" and

• Warn for below file extensuions
  

  ZIP,RAR,7Z,JSON,PL,PLC,PLD,PM,PMK,PY,PY3,PYC,PYD,PYO,PYW,PYX,PXD,PXI,PYI,PYZ,PTH,EGG,WHL,SH,PHP,HTM

• Block below file extensions
  

  ADE,BAT,BIN,CLASS,CHM,CMD,COM,CPL,CSH,EXE,HTA,INF,INS,ISP,ISU,JOB,JAR,JAVA,JS,JSE,JSP,LIB,LNK,KSH,MDE,MSC,MRU,MSH,MSH1,MS1XML,MSI,MSP,MST,NSH,OCX,PCX,PAF,PIF,PS1,PS1XML,PSC1,REG,SCR,SCT,SHS,SWF,SYS,VB,VBE,VBS,VBSCRIPT,VSMACROS,VXD,WS,WSF,WSH,XBAP,XNK,ISO,IMG,DIAGCAB,INETLOC

(comments appreciated on above file extensions)

 

[NormanF]

Hello guys,
I know that ClamAV is a choice, but I'm wondering if there are other antivirus I can put on a Fedora machine to check files (mainly related to Microsoft world).
I've seen that, for instance, Eset Endpoint has a high price compared to other AVs.
Does someone have experience with that?

I've never run AV on Linux and my Mac. Its unnecessary on Unix-based systems. A secured firewall is more than sufficient.

 

[mtbboy1993]

You can use chkrootkit (chkrootkit -- locally checks for signs of a rootkit) for detecting rootkits.

Comodo has a AV for Linux but I never used it before (5 Best Antivirus for Linux 2022 | Linux Antivirus).

There a several vendors that offer AV protection for Linux. Most of them are payed products (F-secure, BitDefender, Kaspersky, Avas, Eset).

Linux is no longer supported. You can still download it but it won't update definitions. I tried it in a VM.
But you can find statements about it online:
Staff member c.o.m.o.d.o_rt wrote this: ''The CAVL development is discontinued and there is no plan to build new version at the moment.
We will keep you posted.''

Instalation of Comodo on Ubuntu 22.04 - unsolvable dependencies

Hi daygle82, The CAVL development is discontinued and there is no plan to build new version at the moment. We will keep you posted. Thanks C.O.M.O.D.O RT

forums.comodo.com

 

[tofargone]

Kaspersky has a linux av...Pretty sure, and it might be free too.

 

[IoSonoPiero]

Kaspersky has a linux av...Pretty sure, and it might be free too.

It's more than a kit you need to download daily and scan your machine.
Very simple to use.

 

[7Oz-64]

Security on Linux
- FirewallD : Home
- Apparmor
- RkHunter + unhide + put a # in the rkhunter.conf line : "DISABLE_TESTS=suspscan hidden_ports hidden_procs deleted_files packet_cap_apps apps"
- Lynis system auditor tools : Lynis - Security auditing and hardening tool for Linux/Unix
- VPN
- Online file scanner like virustotal and zulu.zscaler
- Common sense
- encrypted DNS
- ublock origin or adguard for browsing

 

[IoSonoPiero]

- Common sense

Maybe this is the most important