search

Cisco-Talos / clamav

ClamAV - Documentation is here: https://docs.clamav.net
https://www.clamav.net/
GNU General Public License v2.0
4.45k stars 707 forks source link

Feature Request: PUA tuning #5

Closed Morketh closed 10 years ago

Morketh commented 10 years ago

have the ability to fine tune the PUA detection I just recently built a custom live ISO image for my family including ClamAV after running a scan in Windows 7 using McAfee we then scanned the windows drive from the LiveOS using ClamAV McAfee 229168 total scanned 0 threats ClamAV 187125 total scanned (3503749 signatures loaded) 2204 threats detected almost all of them were PUAs now I know that McAfee is most likely not a good scanner to use (its not looked at with high regards in my circle of IT guys) I will try and test against Avast and a few others to see a broader range of results to compare with. also why is there such a big difference in the total number of scanned files? McAfee also scanned the registry and boot sector but I have no idea what would be the cause of the large difference in files. as far as I know Clam scanned everything on the drive but if it helps I will post the used options here clamscan --recursive --verbose --detect-pua=yes /media/UUID_NUM where UUID_NUM is the UUID of the mounted drive

lattera commented 10 years ago

Thank you for reporting this. Can you open a ticket in our BugZilla tracker at bugzilla.clamav.net? Thanks.

Morketh commented 10 years ago

Request has been posted as entry ID 11055 as such im closing this thread