Dan_Aykroyd
Joined: 12 May 2009 |
Posts: 0 |
|
|
 |
Posted: Mon May 25, 2009 4:53 pm |
|
 |
 |
 |
 |
Hi,
As topic, I submitted a sample of a trojan detected by VirusTotal in 60% in a file called "Total Uninstall.bak" (was a .exe before), but it still isn't included in the signatures!
I really want to like the Clam... but I find it to be very unreliable to detect malware. As I've compared with other files with other AVs, most of the times it doesn't detect them, while the others do...
Thanks.
|
|
GuitarBob
Joined: 09 Jul 2006 |
Posts: 9 |
Location: USA |
|
 |
Posted: Mon May 25, 2009 7:04 pm |
|
 |
 |
 |
 |
All I can suggest is to resubmit the file. Clam also gets a copy of files that it does not detect from Virus Total, Jotti, and other scanning services. I don't know how often they receive them, but they will eventually work those sigs they don't detect.
Some of the other antivirus programs have automated their sigmaking process, but all Clam signatures are developed manually. Clam also has less than 10 people devoted to sigmaking with only one of them working full-time, while some of the larger commercial AVs have 200 people or more working somewhere around the world 24 hours per day. Clam just doesn't have the personnel or equipment resources that they do.
Clam/ClamWin can't detect a virus unless it has a signature for it. Thanks you, and keep the signatures coming!
Regards,
|
|