The 8 Best Free Anti-Virus Programs for Linux

Although Linux operating systems are fairly stable and secure, they may not completely be immune to threats. All computer systems can suffer from malware and viruses, including those running Linux-based operating systems. However, the number of critical threats to Linux-based operating systems is still way lower than threats for Windows or OS X.

Therefore, we need to protect our Linux systems from the various forms of threats such as viruses that can be transmitted in many ways including malicious code, email attachments, malicious URLs, rootkits to mention but a few.

In this article, we will talk about 8 best free anti-virus programs for Linux systems.

1. ClamAV

ClamAV is a free and open source, versatile anti-virus toolkit for Linux systems. It’s used for detecting trojans, viruses, malware and other malicious threats. It’s a standard for mail gateway scanning software; it supports almost all mail file formats.

The following are its well-known features:

  • It’s cross platform; works on Linux, Windows and Mac OS X
  • POSIX compliant, portable
  • Easy to install and use
  • Works primarily from the command-line interface
  • Supports on-access scanning (Linux only)
  • Provides a virus database update
  • It can scan within archives and compressed files (also protects against archive bombs), the built-in support includes Zip, Tar, 7Zip, Rar among others.

2. ClamTk

ClamTk is a lightweight graphical front-end for the popular command-line based ClamAV (Clam Antivirus), written using Perl and Gtk libraries for Unix-like systems such as Linux and FreeBSD.

It‘s designed to be an easy-to-use, on-demand anti-virus scanner. It’s a reliable graphical anti-virus software which runs smoothly, it’s excellent for getting things done fast.

3. ChkrootKit

ChkrootKit is a free and open source lightweight toolkit to locally check for signs of a rootkit.

It contains various programs/scripts which include:

  • chkrootkit – a shell script that checks system binaries for rootkit modification.
  • ifpromisc.c – it checks if an interface is in promiscuous mode.
  • chklastlog.c – this checks for lastlog deletions.
  • chkwtmp.c – this checks for wtmp deletions.
  • check_wtmpx.c – checks for wtmpx deletions (Solaris only).
  • chkproc.c – checks for signs of LKM trojans.
  • chkdirs.c – this checks for signs of LKM trojans.
  • strings.c – it performs quick and dirty strings replacement.
  • chkutmp.c – this checks for utmp deletions.

4. RookKit Hunter

Rootkit Hunter is remarkable lightweight, open source security monitoring and analyzing tool for POSIX compliant systems. It’s available for Linux and FreeBSD.

It’s a scanner for every kind of threats to a Linux system from backdoors, rootkits to various local exploits.

It’s other important features include:

  • It’s command-line based
  • It’s simple to use and offers thorough inspection capabilities.
  • It uses SHA-1 hash comparison to detect malicious entries.
  • It’s portable and compatible with most UNIX-based systems.

5. Comodo Anti-virus For Linux (CAVL)

Comodo is a powerful cross-platform anti-virus and email filtering software. Comodo Anti-virus For Linux offers great virus protection with the additional features for fully configurable anti-spam system.

Comodo anti-virus for Linux features include:

  • Simply install and forget, no annoying false alarms, just solid virus protection.
  • Provides proactive anti-virus protection intercepts all known threats.
  • Optional automatic updates for the most up-to-date virus protection.
  • Comes with a scan scheduler, detailed event viewer, and custom scan profiles.
  • Offers a mail filter which is compatible with Postfix, Qmail, Sendmail and Exim MTA’s.

6. Sophos For Linux

Sophos anti-virus for Linux is a stable and reliable anti-virus software for a wide range of Linux distributions.

It detects and eradicates viruses (including worms and Trojans) on your Linux computer. It can as well find and block all non-Linux viruses that might be stored on your Linux computer and transferred to non-Linux computers.

You can run all commands (except savscan, which is used to run on-demand scans) as root from the from the command-line interface.

Below are the notable features of Sophos For Linux:

  • Easy to install and runs quietly.
  • It’s effective and secure.
  • It can detect and block malware with on-access, on-demand, or scheduled scanning.
  • Offers excellent performance, with low impact on the system.
  • Offers extensive platform coverage.

7. BitDefender For Unices (Not Free)

BitDefender For Unices is a powerful and versatile anti-virus software suite for Linux and FreeBSD. It offers protection and on-demand scanning on both Unix-based and Windows-based disk partitions by scanning for viruses and malware.

The following are a few of its remarkable features:

  • Enables scanning of archives.
  • Supports desktop integration.
  • It has an intuitive GUI and powerful command line interface that supports OS scripting tools.
  • It can quarantine infected files into a protected directory.

8. F-PROT For Linux

F-PROT anti-virus for Linux workstations is a free powerful scanning engine for use on home/personal workstations. Developed to effectively get rid of viruses threatening workstations running Linux, it offers full protection against macro viruses and other forms of malicious software including Trojans.

Below are some of its exceptional features:

  • It supports both 32bit and 64bit versions of Linux x86.
  • It scans for over 2119958 known viruses and their variants.
  • It’s able to perform scheduled scans using cron.
  • It scans hard drives, CD-ROMS, diskettes, network drives, directories and specific files.
  • It can also scan for images of boot sector viruses, macro viruses, and Trojan Horses.

That’s all! Don’t believe that Linux-based operating systems are completely secure, get one of these free anti-viruses we have talked about to secure your workstation or server.

Do you have any thoughts to share with us? If yes, then make use of the feedback form below.

If You Appreciate What We Do Here On TecMint, You Should Consider:

TecMint is the fastest growing and most trusted community site for any kind of Linux Articles, Guides and Books on the web. Millions of people visit TecMint! to search or browse the thousands of published articles available FREELY to all.

If you like what you are reading, please consider buying us a coffee ( or 2 ) as a token of appreciation.

Support Us

We are thankful for your never ending support.

Aaron Kili

Aaron Kili is a Linux and F.O.S.S enthusiast, an upcoming Linux SysAdmin, web developer, and currently a content creator for TecMint who loves working with computers and strongly believes in sharing knowledge.

Your name can also be listed here. Got a tip? Submit it here to become an TecMint author.

RedHat RHCE and RHCSA Certification Book
Linux Foundation LFCS and LFCE Certification Preparation Guide

You may also like...

40 Responses

  1. Dora Smith says:

    Bit Defender for Linux is only available for business use for A LOT of money. I just checked with their support.

    I’m sure they misled you. Please edit your article accordingly so we stop wasting our time.

  2. Jonas says:

    Thanks for a good article, Aaron. I’ve had a good experience from Sophos.

  3. 01101001b says:

    Just a question about F-Prot for Linux: Article says “it scans for over 2119958 known viruses and their variants”. All of them are Linux viruses? I hope not.

  4. Mac29 says:

    BitDefender AV Scanner for Unices is dead, they direct you to their business solution $$/free trial.

    • Aaron Kili says:

      @Mac29

      Thanks for the info, we will cross-check and update the list accordingly.

      • Dora Smith says:

        It is now July 2019. Someone told you that there is no personal Linux antivirus for Bitdefender in May 2018. You promised to check and fix, and obviously you did not! And lots of the other comments here are about that and STILL you do not fix.

        I”m off to find antivirus recommendations by someone who gives a bleep!

  5. gunnar says:

    COMODO antivirus in linux mint 17,3 and 18, it is installed but can not be updated, it indicates that a system file is missing, it is installed but it does not work.

  6. Patrick Mannson says:

    Bought Comodo basic subscription. No installation program. You must call this number and let one of our techs logo on to your computer, configure things and try to upsell you on more services. Tried to cancel.

    They marked my request as probable spam and gave me a link to tech support. Tech support said they could only help with SSL certificates and sent me to their geek buddies support site that runs $170 per year.

    Seems like a damn unethical company to me.

  7. Jim says:

    Sophos runs quietly in the background, unnoticeable. That is, unless your computer is really lame, in which case it can slow your computer to a crawl.

    I have two Linux computers:

    * One is about a year old, 64-bit, 4 GB of RAM, running Linux Mint 18.2 xfce 64-bit. I haven’t even noticed that Sophos is running, except one time when it detected some malware.

    * The other is from 2008, 32-bit, 2 GB of RAM, running Linux Mint 18.2 xfce 32-bit. Sophos slowed this computer to a crawl, so I uninstalled Sophos. Now the computer runs at an acceptable speed.

    • Aaron Kili says:

      @Jim

      Thanks a tonne for sharing your experience of using Sophos with us. We are working around the clock to update the current best Anti-Virus software for Linux.

    • davidhcefx says:

      I installed sophos-av this month, because I was appealed by the claim that it’s super light. However, I found that it slowed my startup/shutdown time quite a bit.
      With `systemd-analyze` I found that it consumed 22 sec for booting. When shutting down, I felt like it’s taking for about 10 sec longer than before.

Leave a Reply to Mac29 Cancel reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.