CLAMAV - Immunet

Just installed it, runs very lean. Any tests of Clamav available, any other memebers using it?

Regards K

 

do you have link to it ?

 

http://www.clamav.net/lang/nl/about/win32/

 

thank you !

 

Runs nice like you wondering how good it is?

 

I've had it running alongside Avast and Avira at times.

It's a cloud av that hasn't been tested.

Both avast and avira are top notch so I don't think I gain anything.

Happy to be corrected.

Ian

 

*** Sorry, I must still be asleep! I just now noticed the OP already did refer to this as CLAMAV - Immunet! ***

This version of ClamAV is the same as and is made by Immunet. There is a thread on this somewhere at Wilder's as well as one or several on Immunet.

Sourcefire Partners with Immunet Press Release: http://immunet.com/pressreleases?id=13

I believe this may be coming out of beta in April. They sent me a follow-up survey on 3/18 looking for suggestions regarding the final.

 

Hi,

The x64 version seems to be real x64. Compared to old version
same
a) check on process execute
b) check on program install
c) delay install until checked

Extras
d) Ethios heuristics
e) possbility to exclude programs/folders etc from scanning and on execute check

Whe you would like to use as a realtime second opinion, disable the monitor process execution and it will use near zero CPU and I/O (it only check when you install something). Other option is to exclude Windows and Program Files and enable the process monitor (your primary AV will check those, now it only checks PE's in the user space).

It is a pitty that Al Huger clouds the way Immunet works (although he claims he makes it perfectly clear on their forum, not an empathic customer oriented answer, more like a Comodo forum respons) . For malware collection they will have some honeypots, have access to the Clam community. It also seems to pickup infections of users and send them home to be analysed. When they have automated analysis (like PrevX/Panda) I would imagine they would scream it of the roofs (because it is a sign of innovation and AV maturity to translate these into generic fingerprints).

Early days immunet seemed to use the same raw-sample apporach as Comodo did (young/immutaure AV's are proud on the collection of blacklist fingerprints, mature AV's on their heuristics and generic family recognition). Now they have a heuristics engine, and another one is scheduled on the release calender. So they must have entered the next stage.

Still they have contracted substantial AV experience. Their news is addressed to show they have a vision and are acquiring the competences to execute it and obtain envisioned market position (standard communication behaviour of startups looking for investors). I remember Cyberhawk also collecting a very experienced team, they were more succesfull with their product han their go to market, so I am stiill mildly enthousiastic about Immunet.

Regards Kees

 

.
I used it for a while on both 32 bit and 64 bit Windows 7. I liked the fact that it had little impact on performance and caused no conflicts, however I have no idea how capable it is. I would like to see an in-depth professional review and find out if this is serious product.

 

Good to know, but what about overhead/resources etc ?

 

Is minimal when you tell it not to check at process execution (only at installs)

 

Well first tests of Immunet were in the context of a 2nd safety net, I use it as prime for the moment (running LUA + SRP + ACL). Clam when tested showed horrible results (say sixth tier rankings) on Windows. On Unix it has been able to follow paid AV's as a 2nd/3rd tier AV. It is used a lot on Firewall boxes in linux environments.

 

Hey,

Out of curiosity, is it ClamAV the same as ClamWin antivirus [open source] or they are two different kind of “animals”.


Thanks.


Carlos

 

ClamWin Free Antivirus uses ClamAV Scanning Engine. They are two separate products and projects.

 

Same scan engine and signature database, but they are not the same program.

 

Hi,

Thanks so much for clarifying this for me.


Regards,


Carlos

 

I'm using it, I forget it's there it's so light. I asked them about not having a full system scan, they said it will be here soon, on version 2. They are very quick to answer you on their boards.

http://community.immunet.com/immunet

 

Clam/Immunet requires a reboot during install. Therefore I cannot trial it in Shadow Defender. Neither do I want to install it on my "main image" unless I have more info.

I would VERY much appreciate answers to the following questions...

1- Does the program add itself to the right click context menu, if desired?

2- Is it easy or difficult to use this program on-demand? Is there a setting where I can choose NOT to start the program with Windows?

3- Is there any substantial difference between (1) the program as downloaded from the Immunet site, as opposed to (2) the program as downloaded from the Clam website?

 

No, but v2 will have such option.

No.

There is no difference as far as I can see.

 

You can easily disable it starting with windows ,with any auto start manager found in tune up softwares or with windows msconfig >startup As stated though there is no option from the immunet gui.
ellison

 

3. Yep, no difference between Immunet and ClamAV other than the ClamAV tray icon is way cooler!

 

I'm using this, coz I'm following Kees
all settings ON for clamAV feels lighter than Avast (with only on-execution fileshield on)


sorry for comparing the two, I have nothing against avast.
If all else fail, I always go back to avast.

I hope it will scan autoruns from USB/CDs before execution.

Can I have another AV on top of ClamAV with my current settings?

 

Run with a-squared free, for right-click scans, and hitman pro on daily startup, you'll be ok.

Kees, if you're around the place, could you post or PM the tweak to have a-squared auto-update? I found where you posted it, but lost it.

 

.
I ran ClamAV/Immunet along side NIS 2010 without any problem.

 

ClamAV/Immunet is still in beta?