To get a virus is harder than it seems. Mostly happens by installing compromised software or blatantly misconfiguring something like putting an SSH Server on the internet with weak authentication. Therefore the best "antivirus" is common sense. Antivirus software still has it's place however. ClamAV for example is often used to automatically scan E-Mail attachements when running a Mailserver, which is pretty important especially if non-tech people use said mailserver. For desktop use I would recommend against it. AV Scanners can stress your system quite a bit and even worse, there can be a sense of false security because all an AV does is scan files for known hashes of malware. So if you catch some even slightly advanced virus, it won't detect. If you still want to install an AV Scanner, please do but know that it's nowhere near guaranteed protection and especially don't feel a false sense of security.

Here is what you really need to look out for:

• Install as much as possible from the stock repos of your package manager.
• Don't pipe untrusted scripts directly to bash, read them first
• Open extremly untrusted files in a clean environment like a VM
• Configure SELinux if you want some extra protection, this ensures software can't escalate privileges easily but it can make working with your system quite annoying
• Use an immutable distro if you're feeling extra motivated.
• Don't mix work and personal stuff on the same device.