On Monday 15 September 2003 6:23 pm, Payal Rathod wrote:
> Hi,
> I love clam antivirus. It has caught many of Sobig virus on my server.
> Does anyone has report on how it competes against commercial viruscanner
> and is anyone using it on a production server?
There happened to be a posting on the MailScanner mailing list today from
someone using ClamAV and F-Prot side by side on a mail server (so every mail
gets scanned by both A-V engines). Their results show that during the past
month, ClamAV caught more viruses than F-Prot did.
Regards,
Antony.
"We are running F-Prot and ClamAV. We pulled stats for the two over the last
month and I was surprised to find that the open source ClamAV caught more
viruses than F-Prot. Since we were a bit wary of installing ClamAV, I
thought I'd post these stats in case others felt mildly concerned the way we
did when we first considered ClamAV."
ClamAV (558355 total)
519800 Worm.Sobig.F
13225 Worm.Dumaru
10032 Worm/Klez.H
8385 Exploit.IFrame.Gen
1758 Trojan.Dropper.C
1437 Worm.BugBear.B
750 Worm.LoveLorn
603 W32/Yaha.g.dam
459 Worm.Sobig.A
355 Worm.LoveLorn.VBS
322 W95/Hybris.PI.003
317 Sircam
159 Yaha.K
141 Yaha.P
89 W32/Magistr.B
88 W32/Magistr.A
55 Worm/Klez.E
42 Worm.Gibe.B
40 W32/Hybris.C
33 W32/BugBear.A
24 W95/Hybris.PI.002
24 W32/Magistr.B5
20 Worm.Dumaru.C
19 Trojan.FDoS.HuC.51
18 W95/Hybris.PI.001
18 VBS.Redlof.Encoded
12 WScr.Unsafe.D
12 Eicar-Test-Signature
11 Worm.Fizzer.A
10 W32/Magistr.B1
10 JS.FortNight.2
9 Worm.Ganda-A
8 W32/Magistr.B3
8 JS.FortNight.M
7 Worm.Sobig.E
7 W32/Magistr.B4
6 W97M/Class.B
5 TR.Happy99/SKA
4 Worm.Holar-H
4 W32/Magistr.B6
4 W32/Magistr.B2
4 Joke.SmallPenis
3 JS/Fortnight.B.1
2 W97/Marker
2 W32/Nimda.html
2 W32/Brid.Worm
2 VBS.LoveLetter.D
2 HTML.Netdex.A
1 Worm.Sobig.C
1 Worm.Palyh.A
1 WM/Thus.B
1 W98/Hybris.E
1 W95/Hybris.PI.000
1 W32/PrettyPark
1 m
1 Joke.CokeGift
F-Prot (519869 total)
460595 W32/[EMAIL PROTECTED]
31529 W32/Sobig.F
10514 W32/[EMAIL PROTECTED]
9791 W32/[EMAIL PROTECTED]
2123 W32/[EMAIL PROTECTED]
758 W32/[EMAIL PROTECTED]
753 W32/[EMAIL PROTECTED]
660 W32/[EMAIL PROTECTED] (corrupted)
601 W32/[EMAIL PROTECTED]
449 W32/[EMAIL PROTECTED]
409 W32/Hybris.worm.B
385 W32/Dumaro.A
355 VBS/Lovelorn.dropper
315 W32/[EMAIL PROTECTED]
137 W32/[EMAIL PROTECTED]
122 W32/[EMAIL PROTECTED]
101 W32/[EMAIL PROTECTED]
55 W32/[EMAIL PROTECTED]
42 W32/[EMAIL PROTECTED]
23 W32/[EMAIL PROTECTED]
21 W32/[EMAIL PROTECTED]
18 VBS/Redolf.A
11 W32/[EMAIL PROTECTED]
11 W32/[EMAIL PROTECTED]
10 JS/[EMAIL PROTECTED]
10 [EMAIL PROTECTED]
8 JS/[EMAIL PROTECTED]
7 W32/[EMAIL PROTECTED]
7 EICAR_Test_File
5 W32/[EMAIL PROTECTED]
5 W32/[EMAIL PROTECTED]
4 W32/[EMAIL PROTECTED]
3 W97M/Eight941.E
3 W32/[EMAIL PROTECTED]
3 W32/Elkern.C
3 JS/Fortnight.A
3 JS/[EMAIL PROTECTED]
2 W97M/Marker.{C,AP,DJ}
2 W32/Hybris.worm.D
2 W32/[EMAIL PROTECTED]
2 VBS/LoveLetter.gen
2 JS/Fortnight.C
1 X97M/Laroux.MV
1 W97M/Thus.A
1 W97M/Proverb.A
1 W32/[EMAIL PROTECTED]
1 W32/[EMAIL PROTECTED]
1 W32/Ronoper.E
1 W32/[EMAIL PROTECTED]
1 W32/CIH.1003.A
1 PrettyPark.51433
1 JS/NoClose.gen
--
How should I know if it works? That's what beta testers are for. I only
coded it.
- Linus Torvalds
-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users
