Dirk Nissen wrote:
I am shure that I am missing something but if I use clamscan to scan my
disks it takes too mutch time (and CPU), and often I have to kill the
program.
You perhaps should try to use clamdscan instead.
I can understand clamscan would be very usefull on a mail gateway, for
scanning the mail inbox or for scanning external media when they are
mounted, but I didn't find a pratical way to regulary scan things as the
Windows partitions on a computer.
Is there some (graphical) frontend that I should use and that would limit
the number of files scanned?
There's http://www.clamwin.com/ ...?
I don't know how commercial products work. Do they really scan all files
on a computer everytime or do they remember the ones they scanned
allready?
Most can do both.
It seems to take about 30-50 minutes to scan a 40GB ATA disk on, say 1GHz P3
hardware if you do a full scan with the standard Windows products (Trend Micro,
Symantec, Panda).
[ ... ]
However this would not work if a virus can change files without changing
the modification date and the filelength, and would only infect old
files... or if a virus can change the database of scanned files./
Yeah, you've identified the problem with assuming files which claim to be old
aren't possibly virusized.
In fact, it's very common for a virus or rootkit to exact a compressed archive
containing files which look like normal system files as far as possible,
although the sloppier ones don't bother.
Is there some script/program that does something like this? What should
I read?
You could check the list archives for the "find" command I just posted.
--
-Chuck
_______________________________________________
http://lurker.clamav.net/list/clamav-users.html
