Eicar.zip not detected + performance stats

Peter Bonivart peter at UCGBOOK.COM
Tue May 27 19:17:04 IST 2003


I don't rely on ClamAV alone, I (or the Windows guys actually) have
Sophos on the Exchange servers and on all clients. But since ClamAV is
free and it doesn't seem to hurt performance much, certainly less than
SpamAssassin, I would like to use it. It looks to me like they update
their files often, latest files are from today.

No AV should have a problem detecting the Eicar file, and it does detect
it from a manual scan so I think it's probably something with my
installation of MailScanner/ClamAV.

/Peter Bonivart

--Unix lovers do it in the Sun

On Tue, 2003-05-27 at 20:07, Kevin Spicer wrote:
> I don't know why you're seeing that behaviour, but I really wouldn't
> rely on Clam alone.  I use Sophos and Clam at work and F-Prot and Clam
> at home.  Clam (although it generally works well) just isn't quick
> enough off the mark with new viruses.  Had we been relying on Clam we
> would have been flooded with Palyh and Fizzer viruses (assuming they got
> past the filename filters...).  I run Clam because a) its free b) I've
> got the cycles to spare c) just in case Sophos/ F-Prot pack up.
>
>
>
>
> BMRB International
> http://www.bmrb.co.uk
> +44 (0)20 8566 5000
> _________________________________________________________________
> This message (and any attachment) is intended only for the
> recipient and may contain confidential and/or privileged
> material.  If you have received this in error, please contact the
> sender and delete this message immediately.  Disclosure, copying
> or other action taken in respect of this email or in
> reliance on it is prohibited.  BMRB International Limited
> accepts no liability in relation to any personal emails, or
> content of any email which does not directly relate to our
> business.



More information about the MailScanner mailing list