I suppose that I might be obligated to answer this one.

The short answer is that F-prot is the fastest, followed closely by Clam-AV in daemon mode, followed by McAfee followed by Clam-AV in non-daemon mode.  EXITSCANONVIRUSDETECT ON shouldn't make much of a difference except for viruses that mail extraodinarily frequently as was the case a few times in the past, but viruses are such a small percentage of your overall mail volume that it shouldn't cause a noticeable change otherwise.  I did test with PRESCAN OFF and found with two scanners, F-Prot and McAfee, that the CPU utilization went up by almost 50%, so this isn't recommended unless you have plenty of head room.

For details of my tests on the scanners:

    http://www.mail-archive.com/declude.virus@declude.com/msg09001.html

Matt



John Carter wrote:
This raises a question(s):  Has anyone done any real testing of which AVs
(in relation to Declude) perform the best, use the least resources, what is
the best scanning order, and how many to use (how many is too many and what
is the point of diminishing returns)?  I realize something like this could
drive you drink, but the idea of having the most effective (most hits for
least resources used)AV as one, then second best next, etc. (along with
EXITSCANONVIRUSDETECT	ON) is appealing.

John C

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Hirthe, Alexander
Sent: Friday, November 04, 2005 8:09 AM
To: Declude.Virus@declude.com
Subject: RE: [Declude.Virus] Second scanner

I run both, AVG as second, Clam as third (and F-Prot as first)


  
-----Original Message-----
From: Kaj Søndergaard Laursen [mailto:[EMAIL PROTECTED]]
Sent: Friday, November 04, 2005 2:51 PM
To: Declude.Virus@declude.com
Subject: RE: [Declude.Virus] Second scanner

 

    
-----Original Message-----
From: [EMAIL PROTECTED] 
[mailto:[EMAIL PROTECTED]] On Behalf Of John T (Lists)
Sent: 4. november 2005 07:22
To: Declude.Virus@declude.com
Subject: RE: [Declude.Virus] Second scanner

I use AVG as the second scanner and am happy with the results.
      
Me too...

I have not tried the windows version of ClamAV - the cygwin version 
did not run well in my setup.

Regards,

Kaj
---
This E-mail came from the Declude.Virus mailing list.  To unsubscribe, 
just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".    The archives can be found
at http://www.mail-archive.com.



    
---
This E-mail came from the Declude.Virus mailing list.  To unsubscribe, just
send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".    The archives can be found
at http://www.mail-archive.com.


---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".    The archives can be found
at http://www.mail-archive.com.


  

Reply via email to