pscrzy wrote: |
Why doesnt Clamwin use features that the program moonsecure uses. The source code for moonsecure is available to use. |
Aside from being written in Delphi which is not compatible with the languages ClamWin uses; the "real time" protection is weak. It uses attempts to globally hook the windows APIs "CreateProcessA" and "CreateProcessW" to determine when a new process is launched which is not even close to the same thing as using a kernel driver to receive notifications of process creation.
Check out their forum too, it's pretty "interesting."