I'd prefer the entire file to be scanned every time. You never know if a virus is slowly plugging its bits into a file. A diff check on a file will not detect a known virus signature. The signature would be spread all over the file. Look at the B1 virus. It destroys FAT partitions by taking its time and deleting a link here and there. Nothing major to start with, until your files start to blow up one by one. :P
A well programmed scanner with heuristic analysis can blaze through a 200MB file. "Most virus scanners" is a harsh term, considering I've seen 100-200%+ performance difference in scanning with 3 or 4 different scanners checking the same files. Every virus scanner has a focal point. Some focus on run-time checking, while another may focus on batch scanning or protocol sniffing. I've yet to find one that does it all extremely well and doesn't interfere with performance on a regular basis. F-PROT is about the best, overall, for all platforms. AVG is a great well-rounded tool for Windows. Panda isn't bad, but I still feel it's over marketed for what's really there. I remember them badgering me @ Comdex `99, every time I walked by their booth. Maybe I'm biased now? Sophos is OK, but it's popular enough to be a direct virus target. Does Sophos have integrity measures, to assure its own files can't be changed? I don't know how many times I've had to re-install Norton AV due to direct infection. I'm sure there are some other scanners that I haven't road-tested. For the most part, I'm happy with AVG on Windows and don't wanna look any further at the moment. If I was running X-windows, I'd have F-PROT running. After all, it was one of the first scanners and they have it down to a science now. I had the free version running on DOS 6.22 for my BBS back in the early 90's. Scary eh? Glen http://picksource.com > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of Adrian Matthews > Sent: Thursday, August 26, 2004 9:57 AM > To: [EMAIL PROTECTED] > Subject: RE: [U2] [UV] Anti-virus recommendations for Universe on > Windows? > > > << so it only scans files that have changed.>> > > That's the problem with most virus scanners. Consider a 200mb file with > a million records in it. What do you think the virus scanner is going to > do each time a record (even one character) is changed in that file? > > Some of them must be intelligent enough to only access the parts of the > file that have changed, such as the higher level backup programs do now. > But I bet the majority will just see the file as changed and scan the > whole thing. > > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of > [EMAIL PROTECTED] > Sent: 26 August 2004 13:58 > To: [EMAIL PROTECTED] > Subject: Re: [U2] [UV] Anti-virus recommendations for Universe on > Windows? > > > Date: Wed, 25 Aug 2004 09:51:36 -0700 > > From: David Scoggins <[EMAIL PROTECTED]> > > ... > > We now are considering installing McAfee AV on the Universe > > servers anyway in light of this event. Does anyone have any > > recommendations regarding how to eliminate the McAfee/UV > > conflict, or is there a better alternative - e.g. Symantec/Norton, > > AVG, F-Prot, etc? > > Consider looking at Sophos (http://www.sophos.com). You can download an > evaluation version from their website, although you do have to register > to > get it. > > I don't use U2 on Windows, but I know that Sophos takes a very > non-intrusive approach and does not affect system performance as much as > Norton. The "on access" scanner keeps track of clean files, so it only > scans files that have changed. > > --Tom Pellitieri > Century Equipment > Toledo, Ohio > ------- > u2-users mailing list > [EMAIL PROTECTED] > To unsubscribe please visit http://listserver.u2ug.org/ > > > The information contained in this email is strictly confidential > and for the use of the addressee only, unless otherwise > indicated. If you are not the intended recipient, please do not > read, copy, use or disclose to others this message or any > attachment. Please also notify the sender by replying to this > email or by telephone +44 (0)20 7896 0011 and then delete the > email and any copies of it. Opinions, conclusions (etc.) that do > not relate to the official business of this company shall be > understood as neither given nor endorsed by it. IG Markets > Limited and IG Index Plc are authorised and regulated by the > Financial Services Authority and, in Australia, by the Australian > Securities and Investments Commission. > ------- > u2-users mailing list > [EMAIL PROTECTED] > To unsubscribe please visit http://listserver.u2ug.org/ ------- u2-users mailing list [EMAIL PROTECTED] To unsubscribe please visit http://listserver.u2ug.org/
