[clamav-users] ClamAV+exim: scanner finds not a single malware

Joel Esler (jesler) jesler at cisco.com
Sat May 28 17:38:44 EDT 2016


To be honest right now, I'm interested in threats coming out more recently.  While yes, your concern is valid, I'd like to hear from someone with a more recent test set.

--
Joel Esler
iPhone

On May 28, 2016, at 12:13 PM, Groach <groachmail-stopspammingme at yahoo.com<mailto:groachmail-stopspammingme at yahoo.com>> wrote:

24 files, ALL OF THEM are viruses of some sort or another (including 1 which is the eicar test virus).

ClamAV database:


----------- SCAN SUMMARY -----------
Known viruses: 4397481
Engine version: 0.99.1
Scanned directories: 0
Scanned files: 24
**Infected files: 10**

Data scanned: 5.27 MB
Data read: 1.48 MB (ratio 3.57:1)
Time: 15.429 sec (0 m 15 s)

--------------------------------------
Completed
--------------------------------------

10.  Just 10.  Out of 24.  And these are all OLD viruses (minimum 2 months old except 1).


But with SANE DEFINITIONS:

----------- SCAN SUMMARY -----------
Known viruses: 4512349
Engine version: 0.99.1
Scanned directories: 0
Scanned files: 24
**Infected files: 23**

Data scanned: 3.92 MB
Data read: 1.48 MB (ratio 2.65:1)
Time: 17.409 sec (0 m 17 s)

--------------------------------------
Completed
--------------------------------------

Says it all really.  I leave you to make your own conclusions.





On 28/05/2016 16:00, G.W. Haywood wrote:
Hi there,

On Mon, 23 May 2016, C.D. Cochrane wrote:

... ClamAV is just ...

and on Mon, 23 May 2016, Joel Esler wrote:

Obviously going to disagree. ...

I'll disagree too, since ClamAV here sees approximately one virus per
annum (and as far as I'm concerned, whether or not ClamAV detects the
virus that it sees is really not an issue).  For some explanation see

http://marc.info/?l=clamav-users&m=141245133506824&w=2


_______________________________________________
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml



More information about the clamav-users mailing list