ClamWin Free Antivirus Forum Index
ClamWin Free Antivirus
Support and Discussion Forums
Reply to topic
Process evaluation
zeldon


Joined: 03 Dec 2006
Posts: 3
Reply with quote
Does ClamWin evaluate/scan every new process that starts in Windows (e.g. by hooking the CreateSection API-call)? Or is it a filesystem scanner "only"? Wink
View user's profileSend private message
budtse


Joined: 14 Jan 2006
Posts: 372
Location: Belgium
Reply with quote
At the moment, ClamWin is an on-demand scanner, which means you have to scan files manually (although there's an option to scan all files that are loaded into memory, but still on demand).

We are working on an on-access scanner which will scan each file before you open/access it. This should be available with release 1.0, but (before you ask), we don't have a set timeline for this release.
View user's profileSend private message
On Demand Versus On Access Scanning
GuitarBob


Joined: 09 Jul 2006
Posts: 4626
Location: USA
Reply with quote
Theoretically, an on demand scanner like ClamWin should find the same malware that an on access scanner will--provided both scanners use the same database/techniques. On access scanners use some different techniques, however, since they must react more quickly to malware. Because of this, you should use ClamWin in conjunction with an on access scanner if your computer is in an environment subject to risk--such as heavy browsing at unknown Web sites or lots of file transfers.

With ClamWin you are getting the benefit of two different projects--the engine from the ClamAV project for Linux servers and the ClamWin project for Windows servers/desktops. Work is underway to adapt ClamWin more specifically for Windows.


Regards,
View user's profileSend private message
zeldon


Joined: 03 Dec 2006
Posts: 3
Reply with quote
Okay, great news. Have you decided on how to achieve an on-access solution? Will you for instance hook the CreateSection API-call, or do you have any other strategy?
View user's profileSend private message
On Access Strategy
GuitarBob


Joined: 09 Jul 2006
Posts: 4626
Location: USA
Reply with quote
Take a look at:
http://wiki.clamwin.com/index.php/ClamWinD

Regards,
View user's profileSend private message
zeldon


Joined: 03 Dec 2006
Posts: 3
Reply with quote
Thanks =)
View user's profileSend private message
Process evaluation
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
All times are GMT  
Page 1 of 1  

  
  
 Reply to topic