PDA

View Full Version : [ubuntu] does clamav suck?



waggingwabbit
June 19th, 2008, 07:02 PM
i just scanned a few tutorial vids and pdf files i downloaded overnight. and on 3 of 8 of the things i downloaded clam says its a virus and the reason is "files number limit exceeded". i looked that up on google and changed the conf file to not limit files or whatever and it still does that, even when i scan just 1 of the pdf files.

it also lists the names of the files scanned wrong. not all 8 of the files in the clam window are the names of the files i have. one of them is repeated 3 times, 2 of them counted as viruses and 1 of them is clean.

so then i tried checking the log that was saved. and it listed the infected files like this: "/home/stink/Desktop/untitled fold..." very helpful and informative....

should i just ignore everything clam says?

hyper_ch
June 19th, 2008, 07:06 PM
I don't use AV....

waggingwabbit
June 19th, 2008, 07:15 PM
I don't use AV....

yes i know, i was just in the other thread where you said you encrypt your stuff =]

someone else answer me?

attari
June 19th, 2008, 07:47 PM
i just scanned a few tutorial vids and pdf files i downloaded overnight. and on 3 of 8 of the things i downloaded clam says its a virus and the reason is "files number limit exceeded". i looked that up on google and changed the conf file to not limit files or whatever and it still does that, even when i scan just 1 of the pdf files.

it also lists the names of the files scanned wrong. not all 8 of the files in the clam window are the names of the files i have. one of them is repeated 3 times, 2 of them counted as viruses and 1 of them is clean.

so then i tried checking the log that was saved. and it listed the infected files like this: "/home/stink/Desktop/untitled fold..." very helpful and informative....

should i just ignore everything clam says?


Yes and no. Yes because you really dont need AV in Ubuntu, so forget what ever its saying.

No, because you might be security paranoid like me! Moreover its better to scan as you may be sharing stuff with Windoze users.

However get Avast Antivirus. You can even configure it to scan single files from right click context menu. Get it (and other useful apps) from here:

http://www.attari.net/index.php?My_space...:Ubuntu:Cool_Ubuntu_Applicati ons

waggingwabbit
June 20th, 2008, 12:26 AM
have yet to fully check out that sight, but from first glance it looks really useful. thanks! i do share with windows users. =]

Chayak
June 21st, 2008, 03:10 AM
ClamAV ranks pretty low on the ranks of detection engines. It's open source which is good but the flaw in that is they don't have a paid team constantly updating the definitions so you don't see newer malware being recognized.

www.virustotal.com
it has a multiscan engine that goes through a lot of commercial AV engines and gives you a report.

lisati
June 21st, 2008, 03:18 AM
AV on Ubuntu is mainly a courtesy thing that only really matters when you're likely to be interacting with Windows users - some ISPs and email providers (including Yahoo) have a "Thou shalt not pass on malware"-type clause in their terms of service.

My personal favourite is AVG, which comes in both Linux-friendly and Windows versions.

AmonSacha
June 21st, 2008, 06:14 PM
I wouldn't say it sucks nessesarily. Every has covered the main reasons for using AV in ubuntu/*nix: for sharing with windows folks.

I would also through in a second vote for AVG if you need to use it:
http://free.grisoft.com/ww.4040

That url is the official site and should be easy to get up in running.

Oldsoldier2003
June 21st, 2008, 08:03 PM
I wouldn't say it sucks nessesarily. Every has covered the main reasons for using AV in ubuntu/*nix: for sharing with windows folks.

I would also through in a second vote for AVG if you need to use it:
http://free.grisoft.com/ww.4040

That url is the official site and should be easy to get up in running.

I tend to agree when you recommend AVG over ClamAV. Every time I have tried ClamAV in the past it has been a disappointing and annoying experience. Luckily AV is not an overwhelming concern for my uses, but in some cases AV is a must and Clam falls short of optimal...