OT: ClamAV v. ball-dropping Sophos

[Martin Hepworth]

<x-flowed>
Dustin

yup - had conversations with Sophos tech support about timeliness of
updates. They don't (or didn't at the time) compare themselves to ClamAV
for update speed, or monitor them...

BUT I have seen Sophos dump quicker than ClamAV on at least one occasion
this year. Sophos haven't been top of the update league for a while
(Kapersky and others tend to be faster), but I tend to find they go a
good job apart from that (and they are local - 10 miles down the road!).


Moral of the story - more than one scanner is best...

--
Martin Hepworth
Snr Systems Administrator
Solid State Logic
Tel: +44 (0)1865 842300


Dustin Baer wrote:
> Anyone who is using Sophos only should be aware that their update for
> Troj/BagleD1-A (bagled-a.ide) came out a full FOUR hours after ClamAV
> was detecting infected zips as Trojan.JS.RunMe.
>
> Their second update for Troj/BagleD1-A came out 3.5 hours after ClamAV
> was detecting infected zips as Trojan.Dropper.Small-11.
>
> I installed ClamAV about a month ago.  I wish I had done it a year ago.
> It's free, and if you aren't using it, you aren't doing much service to
> your organization.
>
> Dustin
>
> ------------------------ MailScanner list ------------------------
> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> 'leave mailscanner' in the body of the email.
> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

**********************************************************************

This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.

This footnote confirms that this email message has been swept
for the presence of computer viruses and is believed to be clean.

**********************************************************************

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
</x-flowed>