arlesterc
Joined: 20 Feb 2017 |
Posts: 0 |
Location: 05186X |
|
 |
Posted: Mon Feb 20, 2017 12:58 am |
|
 |
 |
 |
 |
Do the latest definitions include the ability to detect and quarantine Spora?
|
|
GuitarBob
Joined: 09 Jul 2006 |
Posts: 9 |
Location: USA |
|
 |
Posted: Mon Feb 20, 2017 1:16 am |
|
 |
 |
 |
 |
The ClamWin developers prepare a Windows port of the free, open source Clam AV program for Linux email servers, which is now owned by Cisco. ClamWin uses the Cisco virus signatures prepared for Clam AV. They get virus samples from Virus Total, Other AV companies, and end users. Spora is a very high profile virus/malware, so I am sure that Clam AV has some signatures for it.
Thanks for using ClamWin!
Regards,
|
|
arlesterc
Joined: 20 Feb 2017 |
Posts: 0 |
Location: 05186X |
|
 |
Posted: Mon Feb 20, 2017 2:24 am |
|
 |
 |
 |
 |
Thanks for the quick reply. Is there any way this can be confirmed? Does anybody know this for sure?
|
|
GuitarBob
Joined: 09 Jul 2006 |
Posts: 9 |
Location: USA |
|
 |
Posted: Mon Feb 20, 2017 2:58 am |
|
 |
 |
 |
 |
I prepared signatures at Clam AV for 5 years (prior to Cisco's purchase of Clam AV from Sourcefire) as open source representative for the ClamWin project. The information I gave you about Spora is/was my best guess. I doubt if very much has changed since then, and I doubt if you are going to get any better answer than that. Clam AV is really very small. It has no full-time people working on it. The Cisco people work on it in spare time as their regular duties allow.
ClamWin is an on-demand scanner and does not scan in real-time as files are added or modified on your computer. Your best bet for protection is to use a real-time AV and keep ClamWin as a backup scanner.
Regards,
|
|