ClamWin Free Antivirus Forum Index
ClamWin Free Antivirus
Support and Discussion Forums
Reply to topic
Some suggestions - Based on REAL TIME PROTECTION
Neoshinji


Joined: 23 Apr 2006
Posts: 2
Reply with quote
I would really great to improve Clamwin with Real-Time Scanning engine (Who can catch and block spyware before it is executed with signature-based scanning for known virus/spyware and heuristic/generic detection capabilities to catch new/mutated virus/spyware)

Download Protection - Who prevent virus/spyware from being download/executed in Internet Explorer/Firefox

Browser Hijacking Protection - Who stop browser hijacking activity in real-time

The general propose it's apply "REAL TIME PROTECTION"
View user's profileSend private message
vulfgar


Joined: 21 Apr 2006
Posts: 2
Reply with quote
I agree with Neoshinji. Real-time protection is one of the most important features of a anti-virus software. With teenagers in the family it might be the most important feature!
View user's profileSend private message
alch
Site Admin

Joined: 27 Nov 2005
Posts: 1748
Reply with quote
we know that and are working on it:
http://www.clamwin.com/content/view/35/27/
View user's profileSend private message
vulfgar


Joined: 21 Apr 2006
Posts: 2
Reply with quote
[quote="alch"]we know that and are working on it:
http://www.clamwin.com/content/view/35/27/[/quote]
Great! Very Happy
View user's profileSend private message
Neoshinji


Joined: 23 Apr 2006
Posts: 2
Reply with quote
REALLY WOOT!! ^.^
View user's profileSend private message
Real Time Scanning
GuitarBob


Joined: 09 Jul 2006
Posts: 4292
Location: USA
Reply with quote
I might be getting ahead of the game, but the real-time scan could be a good place to inject some other detection methods in place of (or in addition to) using just the antivirus signatures. McAfee expects to have 400,000 signatures in their database by 2008. Appears to me that, at some point, reliance upon virus signatures alone will be too slow or perhaps even ineffective if viruses become really intelligent.

What about looking at suspicious files (say multiple zip compressions), suspicious code (what's the first thing and second things the code does), etc.? I guess I'm talking about multiple scanning engines--something for the future, I'm sure, and you don't have to do this all at once--just one small step at a time. Several small steps within a year's time will add up to greatly increased functionality.

Keep up the good work!

Regards,
View user's profileSend private message
winny


Joined: 09 Aug 2006
Posts: 4
Reply with quote
I've noticed a few sites suggest trying Clamwin in combination with Winpooch.

http://winpooch.free.fr/home/index.php

Might be worth a try until it can be developed?
View user's profileSend private message
Winpooch
GuitarBob


Joined: 09 Jul 2006
Posts: 4292
Location: USA
Reply with quote
Looks like Winpooch is worth a try. Perhaps they can combine projects with ClamWin at some point. I see it is only for the Win 2000 and above operating systems. That leaves us Win 98 and older systems out in the cold. After being orphaned by ZoneAlarm with Vet, I found ClamWin while looking for low cost antivirus software that supports Win 98.

Regards,
View user's profileSend private message
alch
Site Admin

Joined: 27 Nov 2005
Posts: 1748
Reply with quote
Please take note that the approach used in Winpooch to scan files was insecure when I last checked. I would not advise using it as it can potentially give a false sense of security.
View user's profileSend private message
winny


Joined: 09 Aug 2006
Posts: 4
Reply with quote
Thanks for the words of caution. As a basic system for trapping malware it looks very promising, the Clamwin integration was a welcome bonus.

Hopefully the version currently in development, v0.6, will offer better hooking options at the kernel level.
View user's profileSend private message
Some suggestions - Based on REAL TIME PROTECTION
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
All times are GMT  
Page 1 of 1  

  
  
 Reply to topic