Differences between version 11 and previous revision of ClamAV.
Other diffs: Previous Major Revision, Previous Author, or view the Annotated Edit History
Newer page: | version 11 | Last edited on Thursday, June 3, 2004 8:14:18 am | by RuudSchramp | Revert |
Older page: | version 10 | Last edited on Thursday, June 3, 2004 7:52:10 am | by RuudSchramp | Revert |
@@ -2,9 +2,9 @@
[ClamAV] comes with a tool called __freshclam__ which updates the virus database automatically: it downloads the database from !http://database.clamav.net/ (a round robin record that tries to equally balance the traffic between [all the database mirrors | http://www.clamav.net/mirrors.html]) which is split into two files called __main.cvd__ and __daily.cvd__. __daily.cvd__ is updated frequently and occasionally is merged with __main.cvd__.
In issue 8/2004 (April 5, 2004), the German computer magazine [c't | http://www.heise.de/ct/] published a comparative review of a number of virus scanners, in which they reported that [ClamAV]'s signature updates are provided far too slowly to adequately cope with the contemporary appearance rate of new mail worms, of which new mutations sometimes follow each other within hours. On the other hand, a lot of people appear to have had experiences to the contrary.
-In the same magazine it is explained that ClamAV doesn't include "Code emulation", a way to identify __PolyMorphicVirusses__.
+In the same magazine it is explained that ClamAV doesn't include "Code emulation", a way to identify __PolyMorphicVirusses__[PolyMorphicVirusses]
.
Anyway, you can see [ClamAV]'s response times by yourself at http://news.gmane.org/gmane.comp.security.virus.clamav.virusdb
I suggest you check them out before you say [ClamAV] doesn't suit your needs. You could be surprised.