For those using my XMail AV filter for Win32, I thought I'd give you an update on AV testing...
I've been testing F-Prot, McAfee, and Sophos for a couple weeks now and after several thousands of emails we have a definite winner... F-Prot is by far the fastest. It scans emails in 200-300ms. It hasn't missed a single virus (I update the virus sigs hourly) and uses the least amount of computer resources. NAI's McAfee is quite a bit slower. It scans emails in 800-1000ms. It hasn't missed a single virus either (I update the virus sigs hourly). It also catches a lot of the fraud emails (bank phishing scams). It is a heavy resource user. Sophos is about the same speed as McAfee. It scans emails in 800-900ms. It has missed two viruses (double zipped files -- the other two av's caught). And it is a medium resource user. In summary, they all work fine, but if you haven't put your money in one yet, I'd use F-Prot. As for claims that some viruses aren't caught by F-Prot, it appears that it doesn't try to get specific too much about the virus names... so it may catch Bagle.AT and call it Bagle.AQ as the code difference wasn't enough for them to bother... I don't know why, as their other products will bother telling you it is a slightly different virus. I'm sure that it is possible for F-Prot/McAfee to miss one and Sophos to catch it... I'm sure I don't get every virus in the wild... but these are what my logs show and thought it'd might help some of you smaller users who don't get enough emails to test. XMail-AV will be released again (V1.3) this weekend with logging as a new feature. XMail-SpamC will be released (V1.0) this weekend and will support both just "tagging" and if you use XMail-WAI, will move the email into the user's "spambox" based on score. ------------------------------------------------------------ Jason J Ellingson Technical Consultant 615.301.1682 : nashville 612.605.1132 : minneapolis www.ellingson.com [EMAIL PROTECTED] - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
