I heard that clamwin is making real-time scanning for their antivirus and I think that it is a great idea and that it is needed. I just wanted to suggest that the clamwin team gives the user a chance to turn off the real-time component of clamwin if they wish to do so. I use Avast! as my main antivirus and clamwin as my backup scanner for viruses. Avast has a great real-time scanner, and since you are not supposed to run two real-time scanners at once, I would appreciate it if users can turn off the feature for real-time scanning in the future version of Clamwin. This would allow me to keep both antiviruses without having to get rid of one. I would like to hear other users opinions and an admin's response to this request. Thank You.

P.S.- Keep up the good work

off course the "work in progress" service already works with and without the kernel filter (for the real time scanning)

sherpa you used the words "of course", but I wasn't sure if Clamwin would have an on/off feature for realtime scanning because they dont have an option to turn off or even hide the toolbar icon, and if I were to ask before the toolbar feature was made if it should have an on/off feature, you would have said "of course" but Clamwin DOESNT have a feature to get rid of the toolbar icon and still run the program. My point is that i'm afraid they will integrate the real-time scanning directly with program, just like they have done to the toolbar icon, but I hope they do not, and that a person can turn it off and still run the program.

it's a different thing, currently clamwin doesn't run as service so it needs to have the tray icon to do scheduled scans and automatic updates, you can still get rid of it if you don't like it, clamwin will still work.
I said "off course" for many reasons, mainly because right now I'm the main developer of the service (off course many work comes from alch), I'm sure in my pc I'll not have a real time scanner active. There is also another valid reason for this, the ifs filter (aka real time scanner) needs to be installed/downloaded as different component or maybe added as optional in the clamwin installation, this because the ifs filter cannot be released as GPL due to m$ restrictions on ifs kit (in the ddk), so to assure
GPL license on clamwin, the ifs component needs to be 1) optional 2) not linked with any gpl code. This doesn't mean that the real time scanner
feature will cost money, it will be freeware but not opensource so they cannot be directly shipped together.

Finally... why hell clamwin shouldn't have the option to disable real-time scanner?

I´m so disappointed about the real-time scan been a freeware program... =/
GPL rox!!!

Most antivirus software has the option to disable real time scanning, since some software programs suggest that you do so when installing them, since some RT scanners might not allow the installation if you don't disable the scanner.

Regards,

only the "ifs filter" will not be GPL, a separate component that will interact with clamwind service,
this is not our choice, unfortunately the filter itself cannot be released as GPL (ask m$ )

What's the reason for using the M$ filter from the SDK? Is it too difficult to develop one on your own?

Could you "reverse engineer" a filter? What about breaking the function()s the filter performs and write your own code to
perform those functions without a "filter?"

Regards,

hmm not so easy, it's part of m$ ddk, the ifs ddk is even a different sdk with a particular license, even using its headers makes the code not suitable for the opensource. Reverse engine of kernel mode stuff? I hope you are jocking ;P
There is around an ifs header with prototypes "reversed" but it may also not be legal.
What does the filter cannot be made in a different way, and the only way to do it is using m$ stuff, so it's almost impossible to have such code as gpl.
We are developing all the code in GPL, don't complain us if m$ doesn't allow to make this code as GPL.
Anyway I've made nothing in the ifs code so I may not even be eligible to talk about the license.

I'm not a programmer--I was just trying to see if I could give you some ideas. Sometimes an outsider can help. Advancements/improvements in many fields sometimes come from someone who isn't actually working in the field. I'm sure the ClamWin team is doing what is best for simplicity, effectiveness, and common sense--unlike McAfee and Norton. How do the commercial antivirus vendors handle this filter?

Regards,

they make closed source av so they can safely use a closed source ifs filter

I've noticed that Internet Explorer mentions that it contains code from NCSA Mosaic, RSA, and others. I'm not sure, but perhaps you could integrate the MS filter with the ClamWin distribution files if you gave a similar attribution notice somewhere in ClamWin.

Regards,

Bob
iirc ncsa stuff was release as a bsd compatible license that means that can be included withing closed source projects, microsoft source licenses are not so permissive, and a simple copyright notice is not enough to use the code with an incompatible license

Thanks for all the explanations and for your work on ClamWin.

Regards,

The winpooch has all the Modules necessary to do the real time scan... right?
Its language is C, and I already took a look at its modules - it has specific modules for the Clamwin real-time scan.
So... why cant we use that modules?

Regards...