Local Tech Repair: ClamWin and Clam Sentinel Review on Windows XP

Monday, July 11, 2011

ClamWin and Clam Sentinel Review on Windows XP

Clamwin is a version of ClamAV for windows. Though clam does not have active protection this is where clam sentinel comes in providing active protection for the clam definition database. So trying out clam to see if it really holds up to some of the things that viruses can throw at it we will see if it is worth even trying.


The list of viruses are from the following links.
-----WARNING REAL VIRUSES-----
adeliminator.net
http://www.thevalidatecheck.com/fr_ipd3/MjAxMTA3MTAtNzYuMTE1LjI0OC4xNjk=/index.php?web_id=CD4099&muid=MT-4e1a64ed4d383-3659
http://www.anti-spyware-101.com/download-sph
http://www.top20free.com/wallpaper.html
http://www.keygenguru.com/
http://spywarezapper.com/
http://www.rocketdownload.com/program/serial-keys-recover-215490.html
http://www.topwallpapers.com/
freevirusprotection.org/
www.free-antivirus.info/anti-virus/avg-antivirus-free-edition.html
www.newfreedownloads.com/find/adware-removal.html
www.freechristmasscreensavers.com/animatedsavers.htm
www.ihateadware.com/
www.freechristmassavers.com/
www.fasterpccleanclean.com/remove-rootkit-win32-agent-pp
http://www.reimage.com/lp/nhome/dyn.php?tracking=ga1&banner=6.1_Content_US&adgroup=Malware&ads_name=728x90_spyware_new_lp8&keyword=Spyware&lpx=LP-8
www.handyarchive.com/free/rootkit-web-bug-worm-eliminator/
---------WARNING REAL VIRUSES DON'T GO TO--------------


So while visiting these sites and and allowing the active x to run all these sites. I never received any popups warning me of possible infections or any warnings on a default install. This could possibly been fixed if I turned on warn on suspicious activity though this is not turned on by default. After trying to run in normal mode spybot, malwarebytes, and superantispyware and all of them being killed by the viruses I decided to try safe mode to see if it made any difference. And it did not.

Detection Rate for Default mode for clamwin is 0%


To see if clam will pick up any off them I tried to run it under hirens boot CD to see if the definitions would work. While in Hirens Boot CD Clamwin was able to find 1 virus after a ~31min scan of a 10GB hard drive. Where by comparison avira picked up 5 in 9 mins from hiren boot cd. And superantispyware found 5 more on top of that in 14mins. ClamWin is a non effective virus protection it could not prevent any viruses from being installed and it could barely find any when there was some.

My Rating of this small virus scanner is a complete fail for both boot scanning and active windows scanning.