Does ClamWin contain definitions for the Conficker/Downandup worm? I read an article today saying it has infected approx 30% of all PC's on the internet. https://www.nytimes.com/2009/01/23/technology/internet/23worm.html?_r=1 https://www.nytimes.com/2009/01/23/technology/internet/23worm.html?_r=1

I did a quick search on this forum so I apologize if this information has been posted already.

Thanks ClamWin community!!!

ClamWin uses the virus signature database (and the basic antivirus engine) provided by Clam AV. Clam has signatures for several strains of Conficker/Downadup. I've seen a couple of sigs for Downadup, and I believe some sigmakers have lately been calling it Kido (or something like that).

You are probably not going to be infected with this (or any) virus if you keep your signature definitions and Windows patches up to date, don't mess around with porn/cracked software sites, don't download email attachments you aren't expecting, don't click on links at strange/unknown web sites, and scan your computer regularly.

The problem is, however, any antivirus is basically going to be reactionary--they have to rely upon users to send in samples of viruses that that the antivirus does not detect. This is especially the case for Clam/ClamWin since Clam has only minimal heuristics. Thankfully, Clam has many dedicated users, among them businesses and individuals who also use other AVs in addition to Clam, and they send samples to Clam when it doesn't detect something another AV does.

Regards,