Hello All/GuitarBob,

As some of the ClamWin users may have noticed, the update frequency of the official ClamAV virus database has changed about nine days ago. It seems it’s at least hourly now (since 2012-12-11 21:38 UTC).

Is this experimental or definitive ? I couldn’t find any information about that (blog/lists).

Hello. I do not have good contacts with the Sourcefire people like I did with the original Clam AV team, but It appears to me that Clam AV is now preparing some automatic signatures. Many of the published signature batches seem to be an hour apart and are for odd times--like 8:38, 9:38, 10:38, etc. A manual sigmaker is just not that regular!

I think this is a good sign because an AV company can't keep up with the number of virus submissions by only prparing manual signatures, although the original Clam AV team insisted upon only manual signatures. I also hope that this is a prelude to bringing Clam AV (and maybe ClamWin by default) into the cloud, which Sourcefire has said that they intend to do at some point.

Regards,

And needs to sleep sometimes. That’s what I thought too !


By the way, did you try Immunet 3.0, powered by ClamAV ?

I have tried Immunet Free several times, but each time, I find it has a problem running "housekeeping" scripts on my Win 7 Lenovo laptop, and I get the impression that it is a cheaply-done program. I was told by the old Clam AV team that it was written by two Indian programmers on contract, and one of the last things the Clam team did was to write a custom Immunet dashboard for a large user.

I find Microsoft Security Essentials is a good companion for ClamWin/Clam Sentinel. It is simple and easy to use with good malware detection, but I wish they would have more frequent automatic signature updates and improve the detection just a bit more. I exclude the MSE data folders and quarantine folders from Clam Sentinel's scans and exclude the ClamWin data folder and every .exe process in the Sentinel and ClamWin program folders from MSE's scans. They work pretty well together with only an occasional CPU spike over 50% during scans.

Regards,