4 comments

[ 2.5 ms ] story [ 24.4 ms ] thread
Glad to see ClamAV is still actively maintained and doing feature releases.

Obviously using up to date software, minimizing attack surface, and using secure configurations are the first line of defense.

But this is a great second line of defense, and it is great to have the code publicly available. Many antivirus programs are actually just spyware.

Anyone notice how the ClamAV Github Org is actually "Cisco Talos"? Yeah, that Cisco. Apparently Cisco's Secure Endpoint software is based on ClamAV. Seems they are contributing back, or straight carrying the project, which is nice to see.
ClamAV was bought by SourceFire in 2007, development team included. SourceFire was purchased by Cisco in 2013.

Cisco has owned an maintained ClamAV (and integrated it into their products) for a while.

I have had some good luck scanning friends Windows machines to remove malware using clamav from a live usb. Live usb scanning has been really useful when a Windows install is too encumbered by the malware running on it. I wish more antivirus solutions provided a free bootable option.