[clamav-users] ClamAV® blog: CRDF Joins the ClamAV Signature Partner Program!

[Paul Kosinski]

I too would like the option. (One of the reasons I use ClamAV is
because of its lack of bloat.)

So how about having "extra" databases in freshclam.conf that are
enabled by default? Or perhaps a minimal ClamAV-origin-only database
as an alternative to the default "full" database.

Paul Kosinski


On Wed, 13 Jul 2016 20:13:09 +0000
"Joel Esler (jesler)" <jesler at cisco.com> wrote:

> All third party signatures have the name of the third party submitter
> in the signature itself.  For example:
> 
>    * Win.Malware.Agent4285353149/CRDF-1
> 
> I understand what you are saying Benny, however, we’re rather err on
> the side of shipping more detection to protect users.
> 
> --
> Joel Esler
> Manager, Threat Intelligence Team & Open Source
> Talos Group
> http://www.talosintel.com
> 
> 
> 
> On Jul 13, 2016, at 4:07 PM, Benny Pedersen
> <me at junc.eu<mailto:me at junc.eu>> wrote:
> 
> On 2016-07-13 21:52, Joel Esler (jesler) wrote:
> Nothing prevents anyone from using 3rd party sigs.  We just want to
> incorporate 3rd party sigs into the official repo, for more coverage,
> for more users.
> If ClamAV has, say, 10M users, how many of those 10M do you suppose
> also run 3rd party sigs?  I’d say less that 5%.
> 
> marketing stats
> 
> On Jul 13, 2016, at 3:36 PM, Axb
> <axb.lists at gmail.com<mailto:axb.lists at gmail.com>> wrote: My guess is
> that Benny doens't really mean "silly" but probably is his "special"
> way of saying that it would be nice to be able to opt-in to third
> party sigs.
> 
> bravo 5% understand me :(