Differences between version 24 and predecessor to the previous major change of ClamAV.
Other diffs: Previous Revision, Previous Author, or view the Annotated Edit History
| Newer page: | version 24 | Last edited on Wednesday, August 18, 2004 9:00:09 am | by EricCarter | Revert |
| Older page: | version 21 | Last edited on Saturday, July 17, 2004 2:02:13 am | by WikiWord | Revert |
@@ -1,9 +1,9 @@
[ClamAV | http://www.clamav.net/] is a [Free] ([GPL]) [Virus] scanner for [Linux], [Solaris], [*BSD], [AIX], [MacOSX], [Cygwin] B20 on multiple architectures such as [Intel], [Alpha], [SPARC], Cobalt MIPS boxes, [PowerPC] and [RISC] 6000. It started as a [C]-based reimplementation of the abandoned [Java] !OpenAntiVirus. Signature updates are available in an open FileFormat.
[ClamAV] comes with a tool called __freshclam__ which updates the virus database automatically: it downloads the database from !http://database.clamav.net/ (a round robin record that tries to equally balance the traffic between [all the database mirrors | http://www.clamav.net/mirrors.html]) which is split into two files called __main.cvd__ and __daily.cvd__. __daily.cvd__ is updated frequently and occasionally is merged with __main.cvd__.
-In issue 8/2004 (April 5, 2004), the German computer magazine [c't | http://www.heise.de/ct/] published a comparative review of a number of virus scanners, in which they reported that [ClamAV]'s signature updates are provided far too slowly to adequately cope with the contemporary appearance rate of new mail worms, of which new mutations sometimes follow each other within hours. On the other hand, a lot of people appear to have had experiences to the contrary. That articles
also mentions that [ClamAV] lacks "code emulation", an easy way to identify variations of a PolyMorphicVirus.
+In issue 8/2004 (April 5, 2004), the German computer magazine [c't | http://www.heise.de/ct/] published a comparative review of a number of virus scanners, in which they reported that [ClamAV]'s signature updates are provided far too slowly to adequately cope with the contemporary appearance rate of new mail worms, of which new mutations sometimes follow each other within hours. On the other hand, a lot of people appear to have had experiences to the contrary. That article
also mentions that [ClamAV] lacks "code emulation", an easy way to identify variations of a PolyMorphicVirus.
Anyway, you can see [ClamAV]'s response times by yourself at http://news.gmane.org/gmane.comp.security.virus.clamav.virusdb
I suggest you check them out before you say [ClamAV] doesn't suit your needs. You could be surprised.
@@ -18,15 +18,18 @@
!! User Wishlist
;; !RexSter :
-** local update server. so other clients on a LAN wont have to download from the internet
-** also clean worms, keyloggers, dialers, and other junks...
+** local update server. so other clients on a LAN wont have to download from the internet (NOTE: It's already possible, just read the FAQ)
+** also clean worms, keyloggers, dialers, and other junks... (NOTE: ClamAV already recognizes most common ones)
;; Travis van Dame :
** Client Management Tool to manage ClamAV installed on network computers
+
+;; Eric Carter :
+** On Access Scanner for Windows (ClamWin)
----
See also:
* ClamAvNotes
* [Third-party software with ClamAV support | http://www.clamav.net/3rdparty.html]
