ClamWin

Discussion in 'other anti-virus software' started by minacross, Feb 23, 2005.

Thread Status:
Not open for further replies.
  1. minacross

    minacross Registered Member

    Joined:
    May 12, 2002
    Posts:
    657
    I am confused. CalmWin only detects about 31000 viruses.
    This is less than any other free av not to mention the commercial ones.
    Am I correct?
     

    Attached Files:

  2. RejZoR

    RejZoR Registered Member

    Joined:
    May 31, 2004
    Posts:
    6,426
    As we said many times (even on avast! forums) Mina. These numbers don't mean anything. ClamAV is just not focused on old (and obsolete) DOS viruses which cannot run under WinNT anyway. And ClamAV also supports some kind of generic detection so it can detect several different malware within same family.
    We also don't know if they count 1 signature as 1 malware family (ie whole MyDoom family) or 1 signature as 1 revision of malware (ie MyDoom-A version only).
     
  3. ronjor

    ronjor Global Moderator

    Joined:
    Jul 21, 2003
    Posts:
    57,740
    Location:
    Texas
    It is a work in progress. They seem to keep it updated.
    If you like antivirus programs, you could keep it around for on demand scanning.

    http://www.clamwin.com/

    http://www.clamav.net/abstract.html#pagestart

    http://www.clamav.net/whos.html#pagestart
     
  4. meneer

    meneer Registered Member

    Joined:
    Nov 27, 2002
    Posts:
    1,132
    Location:
    The Netherlands
    Clamav on linux is very efficient. So far it only refuses to detect plexus-b on my e-mail server. I've reported it a few times, but it seems not to pick 'm up. Avast on my workstation catches it.
    So apart from this plexus deficiency, clam catches all viruses thrown at it. This wil do for me.
    Our corporate mail is scanned by a Barracuda spam firewall: spamassassin AND Clamav. We've had less than a dozen virusses get past clamav in almost a million messages. Very impressive performance (Barracuda's anti spam filter is very good too).

    I don't know about the performance of clamwin, but the signatures are great. And the Clam community seems to be able to create signatures very fast.
     
  5. Notok

    Notok Registered Member

    Joined:
    May 28, 2004
    Posts:
    2,969
    Location:
    Portland, OR (USA)
    The size of ClamAVs database may not be anything to write home about, but apparently they do get some things in their database faster than anyone else. I've also seen a couple variants of the backdoor Agent.[xx] that ClamAV and KAV detected when nobody else did. It's not a bad one to have around for on-demand scanning.

    If you find something that it doesn't detect, or detects heuristically, make sure to submit it to them. :)
     
  6. bellgamin

    bellgamin Very Frequent Poster

    Joined:
    Aug 1, 2002
    Posts:
    5,648
    Location:
    Hawaii
    Lately the ClamWin forum has gotten more active. Until recently, questions & comments went without answers for months & months. Now the intelligent/reasonable/non-inflammatory posts are being answered within a few days at most. Also, word has it that they are busily at work on developing a real-time monitor for ClamWin.

    ClamWin is SourceForge's *Project of the Month* for February.

    This open-source project deserves $upport. I upped my donation. Up yours? :eek:

    Main Site.
    Forum
    Donate

     
  7. webmedic

    webmedic Registered Member

    Joined:
    Nov 7, 2004
    Posts:
    123
    Location:
    just curious how much info you can get into here a
    clamav is also a little better than it fairs. I also run it on my email servers with spamassassin under linux and very few things ever make it to my inbox. out of maybe 1000 emails a day roughly I see maybe one or two spams and no virii. Clamav is very fast with definition updates and they do updates hourly. Allot of times they have new def files before kav.

    The only downside is that they dont have as good of unpacking support as kav unless you properly configure it. I have my servers setup fairly well. and so catch a few more things than most.
     
  8. Sandish

    Sandish Registered Member

    Joined:
    Apr 29, 2004
    Posts:
    51
    They do not update hourly, but one or two times a day - sometime more, but not 24 times a day.
     
  9. Sandish

    Sandish Registered Member

    Joined:
    Apr 29, 2004
    Posts:
    51
    How do you use it? ClamAV works better if it receives the files from some "preprocessor", like amavis or qmail-scanner. Also make sure you use the latest release.
     
  10. webmedic

    webmedic Registered Member

    Joined:
    Nov 7, 2004
    Posts:
    123
    Location:
    just curious how much info you can get into here a

    well maybe for clamwin but freshclam under linux updates every hour by default.
     
  11. Sandish

    Sandish Registered Member

    Joined:
    Apr 29, 2004
    Posts:
    51
    It just checks for updates - this doesn´t mean it finds a new version each time.
     
  12. webmedic

    webmedic Registered Member

    Joined:
    Nov 7, 2004
    Posts:
    123
    Location:
    just curious how much info you can get into here a
    correct.
     
Thread Status:
Not open for further replies.