virustotal seems like a nice 'project' but its not, well, completely free/opensource.
Could we have a bootable iso that would check 'common' (not user compiled) binaries in given partition, create a list of sha256 or similar hashes, and upload it on some public server? there it could be compared with other users, and give us some 'evaluation' of security. just like virustotal but in more 'opensource' way?

something like 'cruft' for debian, but that would check hashsums.

There are no guarantees that repositories are 'clean' but it would help?

afaik any decent package manager checks for checksum.

gentoo has now some sort of checksum for the repros when you sync.
and gentoo has for ages checksum on patches and the stuff you download in the distfiles

I'd ditch outdated debian when they are not able to do basic tasks like software tree and download verifications. read what the guy who wrote xscreensaver wrote on his homepage about debian for example

https://en.wikipedia.org/wiki/Open_Source_Tripwire may help

virustotal is not a "project"
Launched in June 2004

This is just my opinion.
I tried Virus Total and after a very short time removed all traces of it.
I found it and the company to be very intrusive.
I still get emails from them after 6 months "begging" me to give them a second try.

installed?
How? from where?

thanks Habitual,
but that uses md5, also if someone managed to modify elf, he could do the same with local md5sum?
anyway, I've started collecting hashes myself:

https://www.linuxquestions.org/quest...in-4175629080/

gentoo has since a few weeks now checksum enabled for the portage tree also. not only for the patches and downloads which was the case for ages.

--

forget about md5, md5 can be easily spoofed. it is not secure for quite a while.

when you want to be sure, use at least 3 or 5 different checksum algorithm on the same file

Try https://www.rfxn.com/projects/linux-malware-detect/

Not bootable. No public "submit" for 'evaluation' of security.

It is intended to be installed and run for REAL TIME monitoring.
Just add it to your own bootable recovery media. They probably don't want to force a different distribution on you.

Are you just looking for excuses NOT to run a virus checker???