Focus on Apple
ClamXav for OS X 10.4 Aug 10 2007 02:43PM
Pfost William B (William Pfost ci irs gov) (4 replies)
RE: ClamXav for OS X 10.4 Aug 10 2007 09:28PM
Todd Woodward (todd_woodward symantec com) (2 replies)
RE: ClamXav for OS X 10.4 Aug 11 2007 12:07PM
David Harley (david a harley gmail com)
Re: ClamXav for OS X 10.4 Aug 11 2007 02:33AM
Edward R Marczak (marczak radiotope com) (2 replies)
RE: ClamXav for OS X 10.4 Aug 14 2007 09:42AM
David Harley (david a harley gmail com) (1 replies)
Re: ClamXav for OS X 10.4 Aug 14 2007 01:18PM
Edward R Marczak (marczak radiotope com) (1 replies)
Re: ClamXav for OS X 10.4 Aug 14 2007 08:43PM
Radoslav Dejanoviæ (radoslav dejanovic opsus hr) (1 replies)
RE: ClamXav for OS X 10.4 Aug 15 2007 10:14AM
David Harley (david a harley gmail com)
RE: ClamXav for OS X 10.4 Aug 13 2007 09:51PM
Todd Woodward (todd_woodward symantec com) (1 replies)
RE: ClamXav for OS X 10.4 Aug 14 2007 10:09AM
David Harley (david a harley gmail com) (1 replies)
Re: ClamXav for OS X 10.4 Aug 14 2007 08:32PM
Michael Dalling (mtdalling gmail com) (2 replies)

On 14 Aug 2007, at 11:09, David Harley wrote:

> By the way, if anyone is interested, that article on the Untangle
> comparative I mentioned is at:
> http://www.smallblue-greenworld.co.uk/AV_comparative_guide.pdf

Very interesting, David.

The point about the sample size and the curious and significant fact
that "WatchGuard, which uses the ClamAV engine, nevertheless failed
to detect anything but the EICAR test file" would be enough to ring
alarm bells on their own. I recall both points from just skimming a
thread about this "test" at Slashdot. But there's so much more here.

This staggered me:

"Subsequent discussions indicated that they were simply acquired from
darkside web sites or the tester's own mailbox ..."

If the latter, that makes the process circular and pretty much
worthless, since he was presumably finding them -- and perhaps _not_
finding others -- in his mailbox with one of the products he was
later testing against.

The University of Utah had a comparative study, testing against
Office macro viruses, using a much larger sample, and in that test
ClamXAV performed notably badly:

<http://www.macos.utah.edu/documentation/security/virus_protection/
part_ii.html>

That was quite some while ago (2003 by the looks) and maybe it's more
effective now. Still, a sample of 18 (or whatever -- there seems to
be doubt even here) combined with all the other inadequacies in the
test doesn't exactly restore confidence.

--
Michael

[ reply ]
RE: ClamXav for OS X 10.4 Aug 15 2007 09:53AM
David Harley (david a harley gmail com)
Re: ClamXav for OS X 10.4 Aug 15 2007 07:32AM
Howard Oakley (h oakley btconnect com)
Re: ClamXav for OS X 10.4 Aug 10 2007 07:24PM
Rob DeWitt (diggertadmin gmail com) (1 replies)
RE: ClamXav for OS X 10.4 Aug 10 2007 08:53PM
David Harley (david a harley gmail com) (2 replies)
RE: ClamXav for OS X 10.4 Aug 10 2007 09:17PM
William Holmberg (wholmberg amdpi com) (1 replies)
RE: ClamXav for OS X 10.4 Aug 11 2007 11:41AM
David Harley (david a harley gmail com) (1 replies)
RE: ClamXav for OS X 10.4 Aug 14 2007 07:43PM
William Holmberg (wholmberg amdpi com) (1 replies)
Re: ClamXav for OS X 10.4 Aug 14 2007 09:16PM
Dave Mangot (dmangot terracottatech com) (1 replies)
RE: ClamXav for OS X 10.4 Aug 14 2007 09:41PM
William Holmberg (wholmberg amdpi com) (1 replies)
Re: ClamXav for OS X 10.4 Aug 14 2007 10:02PM
Dave Mangot (dmangot terracottatech com) (1 replies)
RE: ClamXav for OS X 10.4 Aug 15 2007 01:29PM
William Holmberg (wholmberg amdpi com)
RE: ClamXav for OS X 10.4 Aug 10 2007 09:10PM
Dixon, Wayne (wcdixo aurora lib il us) (2 replies)
RE: ClamXav for OS X 10.4 Aug 11 2007 01:29PM
David Harley (david a harley gmail com)
Re: ClamXav for OS X 10.4 Aug 11 2007 10:16AM
Radoslav Dejanoviæ (radoslav dejanovic opsus hr) (1 replies)
RE: ClamXav for OS X 10.4 Aug 14 2007 09:48AM
David Harley (david a harley gmail com)
Re: ClamXav for OS X 10.4 Aug 10 2007 06:56PM
Tom Yarrish (tom yarrish com)
Re: ClamXav for OS X 10.4 Aug 10 2007 06:50PM
Roland Dobbins (rdobbins cisco com) (1 replies)
RE: ClamXav for OS X 10.4 Aug 10 2007 07:35PM
Pfost William B (William Pfost ci irs gov) (1 replies)
Re: ClamXav for OS X 10.4 Aug 10 2007 08:09PM
Rob DeWitt (diggertadmin gmail com) (2 replies)
Re: ClamXav for OS X 10.4 Aug 10 2007 11:11PM
Paul Schmehl (pauls utdallas edu) (2 replies)
Re: ClamXav for OS X 10.4 Aug 12 2007 12:37PM
Casper Gasper (casper gasper gmail com)
RE: ClamXav for OS X 10.4 Aug 11 2007 12:13PM
David Harley (david a harley gmail com)
Re: ClamXav for OS X 10.4 Aug 10 2007 09:22PM
Kevin Finisterre \(lists\) (kf_lists digitalmunition com) (1 replies)
RE: ClamXav for OS X 10.4 Aug 11 2007 12:22PM
David Harley (david a harley gmail com)


 

Privacy Statement
Copyright 2010, SecurityFocus