content: Uhh, I've used clamav to disinfect a windows machine from a linux live cd xD. For my linux boxes I've played with firewalls and selinux and firejail. Then in the end I go back to using linux without any security features cause its less hassle, and the risk is low.  I could go on all day about the differences between security on windows and linux. The big one is on Windows the security programs do everything for you and you dont really know what they are doing or how. On linux you have a much better idea what does what, and in some cases your the one that has to put things together so it will do what you want.  My favorites are selinux because I've always had a great experience with it and despite how complicated it is, they make it as straightforward as possible. But after using linux for over a decade I mostly neglect security stuff nowadays, for my purposes. Firejail also is great, and very easy to use.  I'd have to recommend Fedora, or centos, or scientific linux for a good selinux experience. OpenSuse also is worth mentioning because its the best in my opinion for windows refugees, and its got apparmour and a firewall you can play around with.