I read through the 0pointer link that birdie posted and its an interesting read for sure. Security is always a super interesting discussion, especially on any Linux forum! But maybe the pure Antivirusscan and Clean functionality is free. This newer Endpoint Suit needs a subscription for full functionality. AFAIK it was also completely free without restrictions. There's Kaspersky Rescue Disk which comes with GUI but it's not a persistent AV, it's a 'boot from, check and shutdown' single use AV.The Bitdefender Version for Linux which I had been using was just CLI. Bitdefender and Avira have long discontinued their products, Comodo offers something which was last updated 9 years ago and is unlikely to work, in short there's nothing. Just for fun I've just spent 15 minutes trying to find a commercial Linux AV with GUI and I've found nothing. They work well, only without GUIĪ standalone Bitdefender AV for Unices has long been deprecated, now they only offer Endpoint Security Tools for Linux workstations which makes it instantly unavailable for most people out there. Most commercial 'Linux' AVs are basically Windows engines wrapped in CLI, that's it. Not like it can modify a read-only filesystem like squashfs, especially if it's on a read-only drive (if you're paranoid of kernel exploits). If not, the system will simply reboot with the previous fresh state, since it was in tmpfs, so all the writes were discarded. I can easily inspect after a system update what changed this way, and commit the changes or not. Here's an example: I set initrd to mount root as an overlayfs, so all writes go to a separate place (usually in tmpfs, but that can be changed if i need to write something large or persistent).

Keep that shit in Windows (and macOS, which is even worse), it's part of the reason I dislike it as an OS (I like Windows as a platform, but thankfully there's Wine). No, this is just a lockdown bullshit, to keep control of users. Your 'signed' security bullshit would prevent ME from tampering with my own system, or make my own initrd, 'for my own good' they say. I don't give a fuck about evil maid attacks or whatever. Does Lennart Pottering ring a fucking bell for you? Just a few weeks ago he talked about exactly the same fucking 'fake news': mean the guy who works for Microsoft? Who would've thought he's pushing the Windows lockdown!

Clamav gui windows