clamav VS desktop-app

My recommendation would be to use ClamAV an open source antivirus engine. It is a versatile tool designed to detect multiple types of threats from numerous file formats and other use cases (cross-platform, integration such as mail server). Finally, it is updated on a daily basis, ensuring protection against the latest known threats. This rapid update cycle is crucial for an antivirus tool to be effective.

Linux has (free) tools to improve security and detect/remove malware: Lynis,Chkrootkit,Rkhunter,ClamAV,Vuls,LMD,radare2,Yara,ntopng,maltrail,Snort,Suricata...

There's clamAV which is open source: https://www.clamav.net/

For personal use, the most commonly used is ClamAV.

Absolutely but if the OP feels they must then they should look into the free ClamAV.

I'd go with what Bman said but second to that ClamAV is a good free option.

Ehhh, there is antivirus software for Linux, like ClamAV. Also a lot of exploits these days target browsers since its an easier attack vector. Also, malware is malware, and most servers use Linux by default. So any malware that's targeting a Linux server could target a desktop user. I don't like the whole "Haha, malware doesn't affect me because everyone targets windows". Sure, those "download now!" buttons that are targeted to gullible windows users might not work on your operating system however your OS is still vulnerable and can still be exploited by malware.

You can also utilize Split tunneling for PoE only: https://github.com/TunnlTo/desktop-app

You can also use tunnel.to for this. It is a front-end for wiresock and gives a GUI for split tunneling. The only unfortunate part is that wiresock isn't yet open source, even though it's based on the open source BorintTun.

True! Could be decent when combined with something like TunnlTo.

Short answer is yes. https://github.com/TunnlTo/desktop-app

Completely wrong solution to OPs case. Actually for Windows, TunnlTo https://github.com/TunnlTo/desktop-app which is based on WS, will be way better. What I suggested is a way to tunnel only apps that support SOCKS5, to route them thru the already connected VPN tunnel.

Better off downloading the WireGuard config and using a dedicated split tunneling client like TunnlTo https://github.com/TunnlTo/desktop-app

I found this Wireguard client while searching on the web, but never tried it. https://github.com/TunnlTo/desktop-app

Not sure it's Wireguard or routing issue if NFS works. Maybe have a look at this tool to simplify per-app split tunnels: https://github.com/TunnlTo/desktop-app

Ask them to use a VPN client that supports split tunneling and then exclude your application https://github.com/TunnlTo/desktop-app

I use a wireguard instance of my VPN through TunnlTo. You should be able to get wireguard credentials from your VPN provider. https://github.com/TunnlTo/desktop-app