Kaspersky launches free malware scanner for Linux

Kaspersky, a Moscow-based cybersecurity and antivirus provider, has released a new virus removal tool named KVRT. The software was designed for Linux users to scan their operating system for viruses and other malware and simultaneously remove these threats.

The myth that Linux is immune to cyberthreats is persistent. That’s why most companies devote little to no resources protecting their computers that run on this operating system.

Modern-day cybercriminals however aren’t ignoring Linux-based operating systems, Kaspersky says in a blog post. Therefore the Russian AV-company has released the Kaspersky Virus Removal Tool, or shortly KVRT, for Linux.

KVRT is a free application that scans computers that run on a Linux-based OS and cleanses them of any detected threats. The software is able to detect viruses, adware and other malware, as well as legitimate programs that can be used for cyber attacks. It scans system memory, startup objects, boot sectors and all files in the operating system known for malware.

Kaspersky promises KVRT works on most Linux distributions, such as Red Hat Enterprise Linux, CentOS, Linux Mint, Ubuntu, SUSE, openSUSE and Debian.

KVRT has a few flaws

The virus removal tool does come with a few drawbacks. For starters, it doesn’t monitor attacks on a computer or server in real time. Another thing to keep in mind is that KVRT only supports 64-bit systems and requires an active internet connection to work.

It also doesn’t have an automated antivirus database updating mechanism. Users who want to be able to recognize the most recent threats, will have to download the latest version of the program from Kaspersky’s website each time.

To ensure that KVRT has access rights to system memory, boot sectors and other important areas, and can also cure or remove detected threats, Kaspersky recommends running it under a root or superuser account. The tool will work under a regular account, but its functionality may be limited.

The release of KVRT comes shortly after a cybersecurity alert that was issued by the Cybersecurity and Infrastructure Security Agency (CISA). The agency warned that attackers are actively exploiting a known vulnerability in the Linux kernel. It allows an attacker who already has access to a system to change his privileges from a normal user to a root user.