[Clamav-users] [Windows] How does ClamAV compare with closed-source alternatives?

2010-05-12 Thread Fred-145
Hello I searched the archives of this mailing-list (the web interface to the archives of the ClamWin doesn't provide a search option) and read the links provided in the subscription e-mail (www.clamav.net/support/ml, www.clamav.net/support/faq, wiki.clamav.net), but only found a single thread fro

Re: [Clamav-users] [Windows] How does ClamAV compare with closed-source alternatives?

2010-05-12 Thread Henrik K
On Wed, May 12, 2010 at 06:08:38AM -0700, Fred-145 wrote: > > Hello > > I searched the archives of this mailing-list (the web interface to the > archives of the ClamWin doesn't provide a search option) and read the links > provided in the subscription e-mail (www.clamav.net/support/ml, > www.clam

Re: [Clamav-users] [Windows] How does ClamAV compare with closed-source alternatives?

2010-05-12 Thread Alain Zidouemba
ClamAV is not specifically designed to be a host-based AV although you can use it as such. If you want a ClamAV solution specially designed to run on end systems, check out ClamAV for Windows: http://www.clamav.net/lang/en/about/win32/ -Alain On Wed, May 12, 2010 at 9:16 AM, Henrik K wrote: > On

Re: [Clamav-users] [Windows] How does ClamAV compare with closed-source alternatives?

2010-05-12 Thread Fred-145
azidouemba wrote: > ClamAV is not specifically designed to be a host-based AV although you > can use it as such. If you want a ClamAV solution specially designed to > run on end systems, check out ClamAV for Windows Thanks for the link. I assume that ClamAV for Windows uses the same virus databa

Re: [Clamav-users] [Windows] How does ClamAV compare with closed-source alternatives?

2010-05-12 Thread Bowie Bailey
Fred-145 wrote: > azidouemba wrote: > >> ClamAV is not specifically designed to be a host-based AV although you >> can use it as such. If you want a ClamAV solution specially designed to >> run on end systems, check out ClamAV for Windows >> > > Thanks for the link. I assume that ClamAV for

Re: [Clamav-users] [Windows] How does ClamAV compare with closed-source alternatives?

2010-05-12 Thread Alain Zidouemba
Technically speaking, ClamAV is open-source. However, we do not provide the code for ClamAV for Windows, therefore ClamAV for Windows is close-source just like the other AV solutions you mentioned. When it comes to whether ClamAV for Windows is going to fit your needs, you will have to decide that

Re: [Clamav-users] [Windows] How does ClamAV compare with closed-source alternatives?

2010-05-12 Thread Fred-145
azidouemba wrote: > When it comes to whether ClamAV for Windows is going to fit your > needs, you will have to decide that for yourself. Unfortunately, I don't have the time and skills for this, so I'd like to read an unbiased and recent comparison. I assume it's possible to setup a bunch of W

Re: [Clamav-users] Can not get clamav-milter to work on Sendmail

2010-05-12 Thread Jason Bertoch
On 2010/05/11 8:48 PM, Shawn Bakhtiar wrote: I don't know what the F= parameter does F= tells sendmail what to do if the milter fails. I prefer F=T. F=T means a temporary error, F=R means a permanent error, and no F= means pass through as if the filter did not exist. -- /Jason smime.p

Re: [Clamav-users] [clamu] [Windows] How does ClamAV compare with closed-source alternatives?

2010-05-12 Thread Charles Gregory
On Wed, 12 May 2010, Fred-145 wrote: Unfortunately, I don't have the time and skills for this, so I'd like to read an unbiased and recent comparison. Google is your friend. The buzzword you need to remember is 'benchmark'. I googled for 'antivirus benchmark' and the top result had a nice long l

[Clamav-users] FP on Sanesecurity.Junk.23771

2010-05-12 Thread Adam Lanier
We've had a couple of legitimate messages hit on Sanesecurity.Junk.23771 within the last week or so. 'Trying to reach you again' is the supposed target text but that was no where to be found in our (decoded) although there was similar text -- Sincerely, Adam Lanier Voyant Strategies Inc. ___

Re: [Clamav-users] FP on Sanesecurity.Junk.23771

2010-05-12 Thread Steve Basford
> We've had a couple of legitimate messages hit on Sanesecurity.Junk.23771 > within the last week or so. Hi Adam, Signature fixed. Sanesecurity False Positives should be reported to: false_positive AT sanesecurity DOT me DOT uk. More information here: http://sanesecurity.co.uk/fps.htm Cheers,

Re: [Clamav-users] [clamu] [Windows] How does ClamAV compare with closed-source alternatives?

2010-05-12 Thread Fred-145
Charles Gregory wrote: > The buzzword you need to remember is 'benchmark'. I googled for 'antivirus > benchmark' and the top result had a nice long list. Thanks for the tip. Is this the list? "Aug 3rd, 05 - The Best of AntiVirus Rank" http://forums.vr-zone.com/developers-software-discussion/300

Re: [Clamav-users] [clamu] [Windows] How does ClamAV compare with closed-source alternatives?

2010-05-12 Thread Shawn Bakhtiar
Dud (Fred-145) do you work for a proprietary anti-virus company or something, cuz it sounds like your just trying to dis?? Charles is right google IS your friend (a big behemoth who's time will soon come): http://www.builderau.com.au/blogs/byteclub/viewblogpost.htm?p=339270831 Also, if you

[Clamav-users] FW: Can not get clamav-milter to work on Sendmail

2010-05-12 Thread Shawn Bakhtiar
Sorry I copied and pasted so I must have missed that but it is there and defined as MilterSocket /var/run/clamd/clamav-milter.socket Ah but I did find this ## ## Clamd options ## # Define the clamd socket to connect to for scanning. # This option is mandatory! Syntax: # Clamd

Re: [Clamav-users] Can not get clamav-milter to work on Sendmail

2010-05-12 Thread Shawn Bakhtiar
Ah.. Thanks Jason... I think I'll the F-ing option out :d pardon z frenche > Date: Wed, 12 May 2010 10:25:34 -0400 > From: ja...@i6ix.com > To: clamav-users@lists.clamav.net > Subject: Re: [Clamav-users] Can not get clamav-milter to work on Sendmail > > On 2010/05/11 8:48 PM, Shawn Bakhtiar

Re: [Clamav-users] [Windows] How does ClamAV compare with closed-source alternatives?

2010-05-12 Thread Freddie Cash
On Wed, May 12, 2010 at 6:08 AM, Fred-145 wrote: > I searched the archives of this mailing-list (the web interface to the > archives of the ClamWin doesn't provide a search option) and read the links > provided in the subscription e-mail (www.clamav.net/support/ml, > www.clamav.net/support/faq, w

Re: [Clamav-users] [Windows] How does ClamAV compare with closed-source alternatives?

2010-05-12 Thread Alain Zidouemba
> ClamAV can only detect malware, it does not clean or even quarantine > anything. ClamAV does not just detect malware, it can can quarantine it. > And it's geared toward e-mail, which means the focus of the AV DB will be > threats that use e-mail as an attach vector.  As such, you won't signatur

Re: [Clamav-users] [clamu] [clamu] [Windows] How does ClamAV compare with closed-source alternatives?

2010-05-12 Thread Charles Gregory
On Wed, 12 May 2010, Fred-145 wrote: I couldn't find a recent comparison that came from a neutral source, ie. not marketing material from a vendor or ad-based site. Does someone have a link? I don't have anything current, and I lost the link a while back, but I recall an interesting statistic

Re: [Clamav-users] [Windows] How does ClamAV compare with closed-source alternatives?

2010-05-12 Thread Freddie Cash
On Wed, May 12, 2010 at 9:01 AM, Alain Zidouemba wrote: > > ClamAV can only detect malware, it does not clean or even quarantine > > anything. > > ClamAV does not just detect malware, it can can quarantine it. Since when? As long as I've been using it, it's been a detection-only system. The fr

Re: [Clamav-users] [Windows] How does ClamAV compare with closed-source alternatives?

2010-05-12 Thread Alain Zidouemba
> Since when?  As long as I've been using it, it's been a detection-only > system.  The frameworks that use ClamAV (milter, amavisd, etc) handle the > quarantining.  All ClamAV does is say "file good" or "file bad". I guess it depends on how you use/implement ClamAV on your system. When you instal

Re: [Clamav-users] [Windows] How does ClamAV compare with closed-source alternatives?

2010-05-12 Thread Fred-145
I rebooted and installed "ClamAV for Windows". I have a couple of questions: 1. Unless I missed it, the UI only allows scanning stuff in RAM, not files on hard-disks. If this is correct, does it mean users are expected to also install ClamWin to scan hard-disks? 2. Based on the input above, Clam

Re: [Clamav-users] [Windows] How does ClamAV compare with closed-source alternatives?

2010-05-12 Thread Török Edwin
On 05/12/2010 09:40 PM, Fred-145 wrote: > > I rebooted and installed "ClamAV for Windows". I have a couple of questions: > > 1. Unless I missed it, the UI only allows scanning stuff in RAM, not files > on hard-disks. If this is correct, does it mean users are expected to also > install ClamWin to

Re: [Clamav-users] [Windows] How does ClamAV compare with closed-source alternatives?

2010-05-12 Thread Alain Zidouemba
> 1. Unless I missed it, the UI only allows scanning stuff in RAM, not files > on hard-disks. If this is correct, does it mean users are expected to also > install ClamWin to scan hard-disks? The current version of ClamAV for Windows offers on-access scanning. On-demand scanning is coming with the

Re: [Clamav-users] [Windows] How does ClamAV compare with closed-source alternatives?

2010-05-12 Thread Fred-145
Alain Zidouemba wrote: > The current version of ClamAV for Windows offers on-access scanning. > On-demand scanning is coming with the next release. Thanks for the clarification. I didn't know what "on-access scanning" and "on-demand scanning" meant. So at this point, ClamAV (on the Windows platf

Re: [Clamav-users] [Windows] How does ClamAV compare with closed-source alternatives?

2010-05-12 Thread Alain Zidouemba
> Thanks for the clarification. I didn't know what "on-access scanning" and > "on-demand scanning" meant. So at this point, ClamAV (on the Windows > platform at least) isn't a single package, and requires both ClamWin and > ClamAV for Windows, and possibly more (not sure if ClamWin scans for stuff

Re: [Clamav-users] [Windows] How does ClamAV compare with closed-source alternatives?

2010-05-12 Thread Bowie Bailey
Fred-145 wrote: > I rebooted and installed "ClamAV for Windows". I have a couple of questions: > Keep in mind that (at the moment), "ClamAV" and "ClamAV for Windows" are two completely unrelated products. > 1. Unless I missed it, the UI only allows scanning stuff in RAM, not files > on hard-di

Re: [Clamav-users] [Windows] How does ClamAV compare with closed-source alternatives?

2010-05-12 Thread Bowie Bailey
Fred-145 wrote: > Alain Zidouemba wrote: > >> The current version of ClamAV for Windows offers on-access scanning. >> On-demand scanning is coming with the next release. >> > > Thanks for the clarification. I didn't know what "on-access scanning" and > "on-demand scanning" meant. So at this

Re: [Clamav-users] [Windows] How does ClamAV compare with closed-source alternatives?

2010-05-12 Thread Fred-145
Bowie Bailey wrote: > Keep in mind that (at the moment), "ClamAV" and "ClamAV for Windows" are > two completely unrelated products. Yup, that's what other users said above. Unfortunately, the page about ClamAV for Windows doesn't say anywhere that it only scans for malware in RAM, not on mass-st

Re: [Clamav-users] [Windows] How does ClamAV compare with closed-source alternatives?

2010-05-12 Thread Török Edwin
On 2010-05-12 22:50, Fred-145 wrote: > > > Bowie Bailey wrote: >> Keep in mind that (at the moment), "ClamAV" and "ClamAV for Windows" are >> two completely unrelated products. > > Yup, that's what other users said above. Unfortunately, the page about > ClamAV for Windows doesn't say anywhere th

Re: [Clamav-users] [Windows] How does ClamAV compare with closed-source alternatives?

2010-05-12 Thread Shawn Bakhtiar
ClamWin Free Antivirus is based on ClamAV engine and uses GNU General Public License by the Free Software Foundation, and is free (as in freedom) software. To find out more about GNU GPL, please visit the following link: Philosophy of the GNU Project - Free Software Foundation. Clam AntiVirus

Re: [Clamav-users] [Windows] How does ClamAV compare with closed-source alternatives?

2010-05-12 Thread Török Edwin
On 2010-05-12 22:59, Shawn Bakhtiar wrote: > > > ClamWin Free Antivirus is based on ClamAV engine and uses GNU General Public > License by the Free Software Foundation, and is free (as in freedom) > software. To find out more about GNU GPL, please visit the following link: > Philosophy of the

Re: [Clamav-users] [Windows] How does ClamAV compare with closed-source alternatives?

2010-05-12 Thread Fred-145
Török Edwin wrote: > It does scan files that are copied around on disks, or files that are > executed from disks. In this version on-demand scanning has not been > implemented, it will in > a future version. That doesn't mean it doesn't protect you from threats. Good. I think it'd be useful to m

[Clamav-users] safebrowsing updates CPU hog

2010-05-12 Thread Wolfgang Breyha
Hi! In the last week I noticed several times that freshclam needs up to 30 minutes using a full CPU to update safebrowsing database. Most of the time the next update shows Empty script safebrowsing-20426.cdiff, need to download entire database What's wrong with safebrowsing? Regards, Wolfgang -

Re: [Clamav-users] safebrowsing updates CPU hog

2010-05-12 Thread Dennis Peterson
On 5/12/10 3:58 PM, Wolfgang Breyha wrote: Hi! In the last week I noticed several times that freshclam needs up to 30 minutes using a full CPU to update safebrowsing database. Most of the time the next update shows Empty script safebrowsing-20426.cdiff, need to download entire database What's