Re: [Clamav-users] [Windows] How does ClamAV compare with closed-source alternatives?

2010-05-12 Thread Alain Zidouemba
ClamAV is not specifically designed to be a host-based AV although you can use it as such. If you want a ClamAV solution specially designed to run on end systems, check out ClamAV for Windows: http://www.clamav.net/lang/en/about/win32/ -Alain On Wed, May 12, 2010 at 9:16 AM, Henrik K

Re: [Clamav-users] [Windows] How does ClamAV compare with closed-source alternatives?

2010-05-12 Thread Fred-145
azidouemba wrote: ClamAV is not specifically designed to be a host-based AV although you can use it as such. If you want a ClamAV solution specially designed to run on end systems, check out ClamAV for Windows Thanks for the link. I assume that ClamAV for Windows uses the same virus database

Re: [Clamav-users] [Windows] How does ClamAV compare with closed-source alternatives?

2010-05-12 Thread Bowie Bailey
Fred-145 wrote: azidouemba wrote: ClamAV is not specifically designed to be a host-based AV although you can use it as such. If you want a ClamAV solution specially designed to run on end systems, check out ClamAV for Windows Thanks for the link. I assume that ClamAV for Windows

Re: [Clamav-users] [Windows] How does ClamAV compare with closed-source alternatives?

2010-05-12 Thread Alain Zidouemba
Technically speaking, ClamAV is open-source. However, we do not provide the code for ClamAV for Windows, therefore ClamAV for Windows is close-source just like the other AV solutions you mentioned. When it comes to whether ClamAV for Windows is going to fit your needs, you will have to decide that

Re: [Clamav-users] [Windows] How does ClamAV compare with closed-source alternatives?

2010-05-12 Thread Fred-145
azidouemba wrote: When it comes to whether ClamAV for Windows is going to fit your needs, you will have to decide that for yourself. Unfortunately, I don't have the time and skills for this, so I'd like to read an unbiased and recent comparison. I assume it's possible to setup a bunch of

Re: [Clamav-users] Can not get clamav-milter to work on Sendmail

2010-05-12 Thread Jason Bertoch
On 2010/05/11 8:48 PM, Shawn Bakhtiar wrote: I don't know what the F= parameter does F= tells sendmail what to do if the milter fails. I prefer F=T. F=T means a temporary error, F=R means a permanent error, and no F= means pass through as if the filter did not exist. -- /Jason

Re: [Clamav-users] [clamu] [Windows] How does ClamAV compare with closed-source alternatives?

2010-05-12 Thread Charles Gregory
On Wed, 12 May 2010, Fred-145 wrote: Unfortunately, I don't have the time and skills for this, so I'd like to read an unbiased and recent comparison. Google is your friend. The buzzword you need to remember is 'benchmark'. I googled for 'antivirus benchmark' and the top result had a nice long

[Clamav-users] FP on Sanesecurity.Junk.23771

2010-05-12 Thread Adam Lanier
We've had a couple of legitimate messages hit on Sanesecurity.Junk.23771 within the last week or so. 'Trying to reach you again' is the supposed target text but that was no where to be found in our (decoded) although there was similar text -- Sincerely, Adam Lanier Voyant Strategies Inc.

Re: [Clamav-users] FP on Sanesecurity.Junk.23771

2010-05-12 Thread Steve Basford
We've had a couple of legitimate messages hit on Sanesecurity.Junk.23771 within the last week or so. Hi Adam, Signature fixed. Sanesecurity False Positives should be reported to: false_positive AT sanesecurity DOT me DOT uk. More information here: http://sanesecurity.co.uk/fps.htm Cheers,

Re: [Clamav-users] [clamu] [Windows] How does ClamAV compare with closed-source alternatives?

2010-05-12 Thread Shawn Bakhtiar
Dud (Fred-145) do you work for a proprietary anti-virus company or something, cuz it sounds like your just trying to dis?? Charles is right google IS your friend (a big behemoth who's time will soon come): http://www.builderau.com.au/blogs/byteclub/viewblogpost.htm?p=339270831 Also, if

[Clamav-users] FW: Can not get clamav-milter to work on Sendmail

2010-05-12 Thread Shawn Bakhtiar
Sorry I copied and pasted so I must have missed that but it is there and defined as MilterSocket /var/run/clamd/clamav-milter.socket Ah but I did find this ## ## Clamd options ## # Define the clamd socket to connect to for scanning. # This option is mandatory! Syntax: #

Re: [Clamav-users] Can not get clamav-milter to work on Sendmail

2010-05-12 Thread Shawn Bakhtiar
Ah.. Thanks Jason... I think I'll the F-ing option out :d pardon z frenche Date: Wed, 12 May 2010 10:25:34 -0400 From: ja...@i6ix.com To: clamav-users@lists.clamav.net Subject: Re: [Clamav-users] Can not get clamav-milter to work on Sendmail On 2010/05/11 8:48 PM, Shawn Bakhtiar

Re: [Clamav-users] [Windows] How does ClamAV compare with closed-source alternatives?

2010-05-12 Thread Freddie Cash
On Wed, May 12, 2010 at 6:08 AM, Fred-145 codecompl...@free.fr wrote: I searched the archives of this mailing-list (the web interface to the archives of the ClamWin doesn't provide a search option) and read the links provided in the subscription e-mail (www.clamav.net/support/ml,

Re: [Clamav-users] [clamu] [clamu] [Windows] How does ClamAV compare with closed-source alternatives?

2010-05-12 Thread Charles Gregory
On Wed, 12 May 2010, Fred-145 wrote: I couldn't find a recent comparison that came from a neutral source, ie. not marketing material from a vendor or ad-based site. Does someone have a link? I don't have anything current, and I lost the link a while back, but I recall an interesting statistic

Re: [Clamav-users] [Windows] How does ClamAV compare with closed-source alternatives?

2010-05-12 Thread Freddie Cash
On Wed, May 12, 2010 at 9:01 AM, Alain Zidouemba azidoue...@sourcefire.comwrote: ClamAV can only detect malware, it does not clean or even quarantine anything. ClamAV does not just detect malware, it can can quarantine it. Since when? As long as I've been using it, it's been a

Re: [Clamav-users] [Windows] How does ClamAV compare with closed-source alternatives?

2010-05-12 Thread Alain Zidouemba
Since when?  As long as I've been using it, it's been a detection-only system.  The frameworks that use ClamAV (milter, amavisd, etc) handle the quarantining.  All ClamAV does is say file good or file bad. I guess it depends on how you use/implement ClamAV on your system. When you install

Re: [Clamav-users] [Windows] How does ClamAV compare with closed-source alternatives?

2010-05-12 Thread Fred-145
I rebooted and installed ClamAV for Windows. I have a couple of questions: 1. Unless I missed it, the UI only allows scanning stuff in RAM, not files on hard-disks. If this is correct, does it mean users are expected to also install ClamWin to scan hard-disks? 2. Based on the input above,

Re: [Clamav-users] [Windows] How does ClamAV compare with closed-source alternatives?

2010-05-12 Thread Török Edwin
On 05/12/2010 09:40 PM, Fred-145 wrote: I rebooted and installed ClamAV for Windows. I have a couple of questions: 1. Unless I missed it, the UI only allows scanning stuff in RAM, not files on hard-disks. If this is correct, does it mean users are expected to also install ClamWin to scan

Re: [Clamav-users] [Windows] How does ClamAV compare with closed-source alternatives?

2010-05-12 Thread Alain Zidouemba
1. Unless I missed it, the UI only allows scanning stuff in RAM, not files on hard-disks. If this is correct, does it mean users are expected to also install ClamWin to scan hard-disks? The current version of ClamAV for Windows offers on-access scanning. On-demand scanning is coming with the

Re: [Clamav-users] [Windows] How does ClamAV compare with closed-source alternatives?

2010-05-12 Thread Fred-145
Alain Zidouemba wrote: The current version of ClamAV for Windows offers on-access scanning. On-demand scanning is coming with the next release. Thanks for the clarification. I didn't know what on-access scanning and on-demand scanning meant. So at this point, ClamAV (on the Windows platform

Re: [Clamav-users] [Windows] How does ClamAV compare with closed-source alternatives?

2010-05-12 Thread Alain Zidouemba
Thanks for the clarification. I didn't know what on-access scanning and on-demand scanning meant. So at this point, ClamAV (on the Windows platform at least) isn't a single package, and requires both ClamWin and ClamAV for Windows, and possibly more (not sure if ClamWin scans for stuff in the

Re: [Clamav-users] [Windows] How does ClamAV compare with closed-source alternatives?

2010-05-12 Thread Bowie Bailey
Fred-145 wrote: I rebooted and installed ClamAV for Windows. I have a couple of questions: Keep in mind that (at the moment), ClamAV and ClamAV for Windows are two completely unrelated products. 1. Unless I missed it, the UI only allows scanning stuff in RAM, not files on hard-disks. If

Re: [Clamav-users] [Windows] How does ClamAV compare with closed-source alternatives?

2010-05-12 Thread Bowie Bailey
Fred-145 wrote: Alain Zidouemba wrote: The current version of ClamAV for Windows offers on-access scanning. On-demand scanning is coming with the next release. Thanks for the clarification. I didn't know what on-access scanning and on-demand scanning meant. So at this point, ClamAV

Re: [Clamav-users] [Windows] How does ClamAV compare with closed-source alternatives?

2010-05-12 Thread Fred-145
Bowie Bailey wrote: Keep in mind that (at the moment), ClamAV and ClamAV for Windows are two completely unrelated products. Yup, that's what other users said above. Unfortunately, the page about ClamAV for Windows doesn't say anywhere that it only scans for malware in RAM, not on

Re: [Clamav-users] [Windows] How does ClamAV compare with closed-source alternatives?

2010-05-12 Thread Török Edwin
On 2010-05-12 22:50, Fred-145 wrote: Bowie Bailey wrote: Keep in mind that (at the moment), ClamAV and ClamAV for Windows are two completely unrelated products. Yup, that's what other users said above. Unfortunately, the page about ClamAV for Windows doesn't say anywhere that it only

Re: [Clamav-users] [Windows] How does ClamAV compare with closed-source alternatives?

2010-05-12 Thread Shawn Bakhtiar
ClamWin Free Antivirus is based on ClamAV engine and uses GNU General Public License by the Free Software Foundation, and is free (as in freedom) software. To find out more about GNU GPL, please visit the following link: Philosophy of the GNU Project - Free Software Foundation. Clam

Re: [Clamav-users] [Windows] How does ClamAV compare with closed-source alternatives?

2010-05-12 Thread Török Edwin
On 2010-05-12 22:59, Shawn Bakhtiar wrote: ClamWin Free Antivirus is based on ClamAV engine and uses GNU General Public License by the Free Software Foundation, and is free (as in freedom) software. To find out more about GNU GPL, please visit the following link: Philosophy of the GNU

Re: [Clamav-users] [Windows] How does ClamAV compare with closed-source alternatives?

2010-05-12 Thread Fred-145
Török Edwin wrote: It does scan files that are copied around on disks, or files that are executed from disks. In this version on-demand scanning has not been implemented, it will in a future version. That doesn't mean it doesn't protect you from threats. Good. I think it'd be useful to make

[Clamav-users] safebrowsing updates CPU hog

2010-05-12 Thread Wolfgang Breyha
Hi! In the last week I noticed several times that freshclam needs up to 30 minutes using a full CPU to update safebrowsing database. Most of the time the next update shows Empty script safebrowsing-20426.cdiff, need to download entire database What's wrong with safebrowsing? Regards, Wolfgang

Re: [Clamav-users] safebrowsing updates CPU hog

2010-05-12 Thread Dennis Peterson
On 5/12/10 3:58 PM, Wolfgang Breyha wrote: Hi! In the last week I noticed several times that freshclam needs up to 30 minutes using a full CPU to update safebrowsing database. Most of the time the next update shows Empty script safebrowsing-20426.cdiff, need to download entire database What's