Difference in virus scanners????

[Julian Field]

<x-flowed>
At 22:44 21/08/2004, you wrote:
>I tried manually scanning 6362 files that are in the MailScanner
>quarantine directory using ClamAV, Trend, and F-Prot.  I got some very
>different results.  Does anyone know why there should be such a
>difference?
>
>Each of the scanners checked the same files.  However, they reported back
>the following results:
>
>ClamAV - 31 infected files
>Trend - 61 infected files (76 including compressed files)
>F-Prot - 46 infected files + 6 suspicious files

It would be interesting to see the differences between the lists of
detected viruses.
A possibility is that F-Prot and/or Trend are finding both infected
archives and infected files within those archives, which ClamAV may be just
reporting as one infection.
--
Julian Field
www.MailScanner.info
Professional Support Services at www.MailScanner.biz
MailScanner thanks transtec Computers for their support
PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
</x-flowed>