GremlinTRM
Joined: 28 Nov 2009 |
Posts: 0 |
|
|
 |
Posted: Sat Nov 28, 2009 10:59 am |
|
 |
 |
 |
 |
Hi Folks,
This has probably been covered somewhere but i can't find it:
If ClamWin uses the ClamAV database, then how relevant is it to Win virii?
It just seems to me as though ClamWin would be using a database designed for UNIX/Linux virii which would have limited, if any, use for scanning on a Win system.
Hopefully, i'm missing something..
|
|
GuitarBob
Joined: 09 Jul 2006 |
Posts: 9 |
Location: USA |
|
 |
Posted: Sat Nov 28, 2009 3:50 pm |
|
 |
 |
 |
 |
Actually, the Linux OS has very few viruses. The core Clam user group is Linux email servers, but the email they serve up is mostly for Windows users. I would say that 99.9% of the viruses in Clam's database are designed for Windows. In 1.5 years of doing Clam signatures, I have only done 2 Linux/Elf virus signatures.
What's needed is for more real Windows PC users to send in malware samples--they viruses they get are a little different than what the email servers get. Also, what's even more needed is a bigger budget for Clam!
The upcoming PE file heuristics in version 0.96 should help improve detection rates when it comes out in February or so. I hope ClamWin can take full advantage of them.
Regards,
|
|
GremlinTRM
Joined: 28 Nov 2009 |
Posts: 0 |
|
|
 |
Posted: Mon Nov 30, 2009 11:19 am |
|
 |
 |
 |
 |
Thanks Bob.
I feel a little bit happier about trying CW now, especially as it's the only free one that lets me install it on a server.
|
|
GuitarBob
Joined: 09 Jul 2006 |
Posts: 9 |
Location: USA |
|
 |
Posted: Mon Nov 30, 2009 1:03 pm |
|
 |
 |
 |
 |
You are very welcome.
ClamWin doesn't yet have a real-time scanner. The average user is better off using a real-time scanner and keeping ClamWin as a backup scanner. It works great in such an application, as no one antivirus can catch every piece of malware, and it will not conflict with most real-time scanners. Microsoft's Security Essentials scanner is free for genuine Windows users, and it is quite good. Also look at PC Tools' Threatfire behavior blocker--It is free, and you may be able to use it in a business.
Regards,
|
|
GremlinTRM
Joined: 28 Nov 2009 |
Posts: 0 |
|
|
 |
Posted: Mon Nov 30, 2009 2:34 pm |
|
 |
 |
 |
 |
Well i'll be upgrading to server2008 once i don't have to and i'll have a look at the new MS stuff, never thought about it before.
It's not for business, i'm just a student these days but i need to keep on top of technology so i run a domain at thome and a business AV solution is way above my needs and budget, especially after paying MS for licences every year.
|
|