[DC LoCo] Usefulness of ClamAV & ClamTK ?

[Mackenzie Morgan]

On Sunday 28 February 2010 3:08:38 pm Marti Martinson wrote:
> I only want to have packaged s/w (though I have, years ago, compiled on
> the command line) on my system. Does anyone have any personal HORROR
> stories of having this installed?

Recently used it to confirm that a Windows machine was acting up *not* due to a 
virus... a week or so later, the hardware failed entirely ;-)  (as in, had it 
installed inside Ubuntu and ran it on the Windows drive)

I'd consider its utility to be more in line with "make sure that file you 
downloaded won't hurt your Windows-using-friends' machines" rather than 
"protect you from Linux viruses" since viruses aren't an issue on Linux.  More 
of an issue on a Linux machine would be a direct attack by a human, and for 
that you'd want monitoring.  It's not a constantly-monitoring thing.  It's a 
"run it now on a drive or a file" thing.  If you wanted to be alerted to 
changes on your system, what you'd really want is Tripwire (which can false-
positive a lot, particularly when you install updates as then *lots* of stuff 
is changing).

-- 
Mackenzie Morgan
http://ubuntulinuxtipstricks.blogspot.com
apt-get moo