OT New information about clamav

["Paul Schmehl" <pauls () utdallas edu>]

Normally I wouldn't post something this far off topic to the list, however I
feel an obligation to clarify some issues WRT clamav.  Recently I stated
that clamav only detected about 54% of the ITW viruses in a private test
that I have access to.  This is still true.  However, it has come to my
attention just today that the developers of clamav recently corrected a bug
that effectively disabled detection of all polymorphic viruses.  This should
*dramatically* impact the results of testing clamav against the ITW viruses,
so I have requested that the test be rerun.

I'm also happy to report that AV-Test.org, is now including clamav in their
standard testing, so comparison of results to other scanners should be
publicly available in the future.

Paul Schmehl (pauls () utdallas edu)
Adjunct Information Security Officer
The University of Texas at Dallas
AVIEN Founding Member
http://www.utdallas.edu/~pauls/



-------------------------------------------------------
SF.Net is sponsored by: Speed Start Your Linux Apps Now.
Build and deploy apps & Web services for Linux with
a free DVD software kit from IBM. Click Now!
http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users