Difference in virus scanners????

Julian Field mailscanner at ecs.soton.ac.uk
Sat Aug 21 22:59:54 IST 2004

At 22:44 21/08/2004, you wrote:
>I tried manually scanning 6362 files that are in the MailScanner
>quarantine directory using ClamAV, Trend, and F-Prot.  I got some very
>different results.  Does anyone know why there should be such a
>Each of the scanners checked the same files.  However, they reported back
>the following results:
>ClamAV - 31 infected files
>Trend - 61 infected files (76 including compressed files)
>F-Prot - 46 infected files + 6 suspicious files

It would be interesting to see the differences between the lists of
detected viruses.
A possibility is that F-Prot and/or Trend are finding both infected
archives and infected files within those archives, which ClamAV may be just
reporting as one infection.
Julian Field
Professional Support Services at www.MailScanner.biz
MailScanner thanks transtec Computers for their support
PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

More information about the MailScanner mailing list