Free on-demand scanners that fit these criterias

Many AV companies offer free rescue disks - I see a bunch of them when I run YUMI. Maybe you could check their websites for command line versions, which are sometimes free like Emsisoft Emergency Kit. You may also be able to add them the context menu manually. For example, I use FileMenu Tools, which adds a bunch of useful commands to your context menu and also let's you define custom commands. I used it to add a command to scan with Emsisoft's a2cmd tool.

 

No, clamwin does not install "background processes like Avira" .
Where do you have that from ?

Yes, it scans the computer-memory for infections, when you tell it to do so .
Why would you want to scan your HDD, or certain areas of it, all the time ?
Scan files on arrival, job done .
(Besides, you can set up custom-scans .)

As for the claimed 'poor detection rate' :
True, clamwin doesn't do 'heuristics' so it doesn't decide that suddenly 'winlogon.exe' is a dangerous virus that needs to be removed !

But go ahead and install your favourite corporate AV :
http://torrentfreak.com/mcafee-brands-the-pirate-bay-as-a-security-threat-131110/

I use clamwin and virus-total for 'detecting malware' .
I have NEVER had a virus-infection .
Where the Hell do you guys download all those crap-files ?

 

No it isn't x2 .
You will need to provide some documentation for your claim .

 

I'll check that out later. *Sorry, it seems to re-download the whole thing on updates (not too big of a deal for its size), but I'm most worried about the limited signatures.

Can't believe I keep forgetting to mention that. I'm using TrueCrypt so very few if any of them will work without modification, plus it's pretty inconvenient rebooting twice just to custom scan some files.

What is that tray icon doing there on startup then? I think there was an updater as well.

I never said all the time, it's simply a double-check weekly or so. Scanning only the memory isn't enough (I wonder if ClamWin detects 64-bit processes), and scanning entire drives is too long. Once again, how do I set up custom scan into quick scan?

Detection rates is the most important aspect of scanning. I would still be using Windows Defender if it isn't lacking.

Point being? Doesn't appear to be related to the thread at all.

So you'll rely on ClamWin for files larger than 64 MB?

 

hxxp://web.archive.org/web/20110721083950/http://www.virus.gr/portal/en/content/2008-06,-1-21-june
hxxp://web.archive.org/web/20110106220536/http://www.virus.gr/portal/en/content/2009-08%2C-10-august-05-september

June 2008 --> ClamWin 0.93 = 54.68% = #37 out of 49 products
August-September 2009 --> ClamWin 0.95.2 = 52,48% = #43 out of 55 products

 

Dr.WEB CureIt! also fits most of the criteria at post 1 but you will have to download it again for updated virus databases, then there is the commercial version (My Dr.Web CureIt!) which allows updating but it isn't free.

 

Thanks for the suggestion, but it's not something I would normally use.

To clarify: only #4, #5, and maybe #6 are somewhat optional, while the rest are mandatory outside of exceptional situations.

 

Four years old results?
Is it still the same today?

 

whichever the one is at VirusTotal - ClamWin or ClamAV, its always giving false positives. if the result is 1 or 2 hits out of 41, ClamAV is almost always listed.

 

Is it worse to give FPs or not detecting real threats?

 

Depends on the severity, both could cripple the system. But real threats are definitely worse for your privacy.

Anyways, I'd like for this thread to be back on topic. Also, I noticed we're missing command line scanners, any recommendations?

 

Clamwin can be run from the command line.
Excerpt from the manual:

Running a Virus Scan from the Command Line
ClamWin can be run from the command line, from a batch file for instance. For a full list of parameters, navigate to the directory containing the executable files ("C:\Program Files\ClamWin\bin" on a default installation) and run

clamscan.exe --help

The database directory must be specified, using the --database=FILE/DIR parameter. In a default installation, the command to scan the entire C: drive would be:

clamscan.exe --database="C:\Program Files\ClamWin\db" --recursive C:\

Note the use of the --recursive parameter to ensure that sub-directories are scanned.

When run from the command line, a value will be returned, indicating whether or not a virus was detected. If no virus is found, the return value will be 0. If a virus is found, the return value is 1. Any other return value indicates an error.

 

Clamwin was already eliminated a while ago. Anyways, I've conceded to using a custom install of Avira with only Rootkits Protection and Shell Extension.

After disabling the avguard service (don't know what purpose it serves anymore) and avgnt startup entry, everything seems to be running fine after multiple reboots. Kept the sched service so it automatically updates.

 

well this don't fit all of your rule

but webroot will still work as on demand scanner even when the trail period end

regards

 

but it wont removed malware

 

Really, guess I'll wait and see until my Broncos Trial x2 (hopefully ) and Facebook Trial ends.

 

and what are those ? xD

 

Here you go:
http://www.webroot.com/customerSupport/broncosTrial.php
https://www.facebook.com/security/app_360406100715618

 

And a thread here:https://www.wilderssecurity.com/showthread.php?t=354285

 

Another two I had that were close, but not enough were ArcaMicroScan and MWAV.

ArcaMicroScan does not have quick scan. It's detection rate wasn't good last time I tested. Also its only manual action "Ask" prompts you at every detection and stops the scan until you choose what to do. Therefore not sufficient enough.

MWAV was bloated (over 1 GB) and always had false positives. A lot of the bloat had to do with keeping update files, which basically meant full duplication of definitions and components. Removing those resulted in partial re-creation at update I believe. With the options of only scanning or scanning + auto removal, that makes the constant false positives a deal beaker. Otherwise, it fits all the requirements.

 

Thank you for the link
the broncos trail will be very handy

Bad engrish too xD

 

Just tried all of the suggested again and did a little homebrew testing. Everything was within expectations as posted, except three cases:
1. WinMHR is seriously outdated, more so than I thought. Worst results I've seen. Clamwin was third last by the way, above this and the specialized AVZ.
2. On a relatively clean Windows XP virtual machine (did test other products and some were running to be tested) Panda failed to custom scan without crashing and leaving behind a translucent window that can't be terminated. Had to restart, only to find out "Analyze other elements..." isn't even that and scans the whole system as well, then of course exited with its protected process running in the background again. ArcaMicroScan also crashed, even after reboot.
3. McAfee Stinger actually detected most of the threats thanks to Artemis, but I still dislike the update procedure and all or nothing action on detection (actually dislike that about ESET as well).

Therefore, nothing more was added. I strongly considered ESET Online Scanner, but the lack of a quick scan and its semi-automatic actions at detection just prevented that.

 

Yes, but then what if you have a mix of correct detections and false positives? That's why I like to select by each individual item instead of having the scanner do it for me, even if you can choose the automatic action.