Avast alerts on ClamWin signature files in a subdirectory of C:\Documents and Settings\All Users.clamwin\db, which it didn’t do before. The majority of the signature files do not cause an alert. I have ClamWin AV on my WinXP desktop, and haven’t had an alert for several days now. If I get another one, I will exclude the directory and all subdirectories under it.
You are partially correct because many of the temp files I referenced ultimately land in the ClamWin DB folder, which is re-written upon updating. However, ClamWin/ClamAV signatures have long been detected by Avast. A forum search offers this topic from 2009.
I’ve been running ClamWin AV for several years now, and Avast for 4-5 years. Only recently (after the most recent ClamWin program update) has Avast alerted on ClamWin signatures for me, and even now it’s not that often. I just did a full scan on my WinXP machine which has ClamWin AV with Avast, and Avast didn’t alert. The alerts are quite random. I haven’t yet set any exclusions in Avast for ClamWin.
Well, my link in Reply #21 shows that Avast has alerted on ClamWin since at least 2009.
There have been some changes at ClamAV since Sourcefire acquired them and Immunet about a year ago. One notable improvement has been the implementation of automated signature creation five or six months ago, which has greatly increased the detection rate of ClamAV, hence ClamWin and Immunet. If I had to guess, I would say the change in signatures is more likely causing your sudden detection of ClamWin, rather than a recent program update, which have mostly been minor bug fixes.
ClamWin AV was updated to 0.97.8 on April 08, 2013. Avast released 8.0.1489 on May 09, 2013. The first Avast detections ever (for me) of ClamWin signatures were in the second week of May, 2013. There have only been 3 of them, with the last one several days ago. Actually, this seems to indicate that Avast scanning is more aggressive.
At any rate, the detections have done no harm as I have Avast set to ask as first option. Avast streaming updates are likely more aggressive than before, as there have been a lot more of them lately.
i dont think that has changed…
i think they now release them as they are ready instead of waiting for xx amount of signatures tested or a preset release time