Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.

Is ClamXav worth the Price?

  • Yes! It's easily the best OS X Virus Scanner out there.

    Votes: 12 10.3%
  • No! There are other apps that can do the same or better for less.

    Votes: 39 33.6%
  • No! I see no use for Virus scanners on OS X.

    Votes: 65 56.0%

  • Total voters
    116
You never know - they might choose to keep the free MAS version as is because there's no Sentry plug-in. I suppose we'll just have to wait it out.

That or I can disable Sentry in the full version. I may buy it eventually. I mean, at most it's $30 and I've been using it for free for years. I don't mind supporting the developer.

The biggest reason I want something to scan with is because I get a lot of junk from Windows users in group projects and assignments and I like to make sure it's clear before I send it to others.
 
  • Like
Reactions: Artimus12
That website is owned by ESET who want to scare suckers into buying their unneeded product.

There is utility to having a scanner available in certain situations (like sharing files with Windows users), but I can't people don't evaluate sources of data. I mean, if the site is owned by an antivirus company, odds are they are biased toward needed an AV product.
 
I will buy it eventually. I need it for malware scanning, though I already have AdwareMedic.
 
I also use AdwareMedic, and I've definitely scanned with it in the past couple of days, but it missed this in my "Junk" email folder. I didn't think restoring the old version of ClamXav from the trash would work, but I was wrong.

FYI: this was an attempted PayPal phishing scam, and ironically, it's the first time I've had any kind of malware since buying the Mac last August.

Screen Shot 2015-07-13 at 01.33.28.jpg
 
I am lately considering installing an antivirus on my Mac, so I'll tell you my reasoning and why I wouldn't choose ClamXav.

ClamXav, from what I know and see, is just a local antivirus, and specifically born as a mail gateway antivirus. Looks like it has grown enough to be used as a "classical antivirus" which checks your filesystem, but that's IMHO pretty much moot anyway since "classical antiviruses" are too little, too late. When attacks are based on zero-day exploits and the result can be firmware hacks, or purely-memory-based threats (which will leave no trace on any disk), a classical antivirus is at the very best an annoyance. And I doubt ClamXav hooks deep enough in the OS to even try finding such things.

If you follow the security scene news, probably you have heard about what are the current threats, and know that classical antiviruses are pretty much hopeless. Your only chance to be safeR is (apart from prevention!) to have someone making sense out of what's happening in the big scale of things, like searching for attack patterns against lots of people, analyze suspicious files coming from different situations, etc. You will probably still get pwned, but at least there is a chance that your pwnage will help trace the attack and help others - and maybe other's pwnage will help you too.

The basic idea is that a merely unexpected file in one computer might not get a second thought, but the same unexpected file on one thousand computers some of which are starting to behave strange might grant a deeper analysis.

So: I plan on trying Kaspersky. Why? Because they are pretty active in the security scene, enough that lately they were very specifically targeted by one of the nasties.
Also, note that on one of the recent advanced threats, the analysis showed that they were prepared to try to hide specifically from non-american antiviruses - looked like they didn't care about McAfee/Symantec, for example, but had modules against Avira, Kaspersky, etc.
 
Last edited:
  • Like
Reactions: Artimus12
Given that ClamXav is no longer free, I figure I might as well look into the other options before purchasing it.

Anyway, the latest review from AV Comparatives (conducted in July of 2014) suggested that the best free options (in terms of protection) are Avast, Avira and Sophos.

Does anybody have any experience with / opinions on any of these options? From the user reviews I've been able to find, people seem to speak better of Avira and Saphos than they do Avast, but it's a pretty small sample size.

There really doesn't seem to be anything particularly special or unique about ClamXav (relative to the other free solutions). It's kind of funny how it became so much more popular than the other solutions.
 
  • Like
Reactions: Artimus12
Given that ClamXav is no longer free, I figure I might as well look into the other options before purchasing it.

Anyway, the latest review from AV Comparatives (conducted in July of 2014) suggested that the best free options (in terms of protection) are Avast, Avira and Sophos.

Does anybody have any experience with / opinions on any of these options? From the user reviews I've been able to find, people seem to speak better of Avira and Saphos than they do Avast, but it's a pretty small sample size.

There really doesn't seem to be anything particularly special or unique about ClamXav (relative to the other free solutions). It's kind of funny how it became so much more popular than the other solutions.

WARNING! WARNING!! INCOMING HUGE WALL OF TEXT!!!

Please, don't yell at me if you hate long posts. Be kind and just scroll on by please. And yes, I do have too much time on my hands but in my defense, I am permanently disabled and live alone (poor me!) so sometimes I do go a little overboard with my posts. If it helps, I do mean well!

While I don't have high hopes, it costs zero and might help so since I find it does not adversely affect system performance nor irritate me with pop ups, I've been using Avira's free app. It's been trouble free so there's that.

It has also discovered zero. It has intercepted zero.

That isn't necessarily bad. I practice safe habits surfing. I never open files from untrusted sources. I run Ghostery to turn off tracking on everything it covers and not just the defaults - everything. I enable stuff rarely on a case by case basis if some page needs it and I approve of it. This does not come up often. Ghostery is free also. They make money selling data, if you let them use yours anonymously as part of a large aggregate. I enabled this because they offer me something of value and I am fine with them selling anonymous data to the marketeers so they can continue to in exchange give me this. I respect that might be a turn off for some but it doesn't phase me personally.

I tried Disconnect Desktop which connects you to the net via a VPN they provide and also blocks a lot of tracking by default. There is some issue with that that prevents the Steam gaming client from connecting. It is easy enough to shut it off and turn it back on after gaming but ultimately it seemed redundant to me. Ghostery is blocking more tracking for me and I don't need or even want to connect via VPN. If you do though, this is a good option and is free. Even the fully featured pay version is actually free because they are some type of sort of not for profit or whatnot. I forget the name of it. Sorry, I was not a business major. ;-)

I deleted the clam. As somebody else noted above, what it does is pretty old and out of date news at this point.

Other stuff I use are browser add-ons for Safari in my case. I run Adblock which does a nice job and does not bug me with pop ups, etc. I can selectively enable an ad I want for some reason easily enough. I also use clea.nr Videos which reduces You Tube pages to just the video itself. Lovely. I can always see the other stuff if I am feeling masochistic for some reason. I do leave showing my subscriptions enabled. I use Facebook cleaner too but honestly, Facebook is so dirty no amount of soap can ever get it clean. I am only there to communicate with family and a select few friends who are real, live people I actually know in "real life." Even then, I really hate the place. Apple needs to create something for families that is like Facebook with none of the Facebook. I know we have photo sharing, messages, etc. but a stripped down Family Connect app of some sort by Apple and included in OS X and iOS would be really cool. Well, this assumes you really want to be connected to family that way. Come to think of it, I love them but some distance is probably a healthy thing.

Sorry, I am really wandering off there but just one more thing I do that I'll mention. I do not search with google. I do not use google anything anymore. They are data pimps whoring me out. Well, I shall prostitute myself for crappy apps no more with the single exception of You Tube where tracking is turned off (sorry google!) and the UI is reduced to the video itself. I don't use Yahoo search either and I sure don't use Bing. God, Microsoft cannot even come up with a decent name can they, never mind decent software? Microsoft is not welcome in my home or office. What does this leave? DuckDuckGo, that's what and unlike with lesser browsers you don't need to go looking for a plug in or even their page to enable it. That said, I did bother to visit the main page one time and make it my home page. Why this choice? Many probably know by now but for anyone who may not, they do not track your search history. That's why.

Why do I care about tracking? Because it is so pervasive and provides so much data to marketeers that it can even impact what you pay for something online versus what somebody else pays. Don't believe me? Do you wonder why it is that when you visit someplace like Amazon.com the prices are changing constantly and I do mean constantly for many things. Look at music for example. Search up some favorite artist albums and wish list them. Now, watch how they change in price regularly but especially note what the prices are. Notice anything odd there? Since when is one album $5.99 and the same one on some other day is $5.07 just as an example. Since when do retailers ever go with anything but x dollars and 99 or maybe 95 cents because research has taught them doing this causes buyers to perceive the price as being a step lower. So 9.99 looks so much better than 10 bucks to us in our subconscious minds. Now, when we deliberately think about this we know that of course it's bs. However, when we are shopping we are not making that analysis with each purchase. The grocery is a great example of this. We might go in there and buy maybe 50 or more items all x.99 and never give it a thought. Marketers know however that if everything was x.00 we would probably buy less or make alternative choices.

I got into all that stuff because there is a reason companies spend so much money to harvest user data online about lifestyle, demographic, purchase and other information and get paid very well for that data which we give them in the majority for free. They are doing this with exactly one thought in mind - to extract the maximum amount of money possible from consumers. What the market will bear, which is what stuff needs to be priced at to move, varies all the way down to the individual and this is why they want this data for one reason. More significant however is that it is already in use and affecting the prices we pay for things. I believe without having bother to conduct any real research into this to prove the point that it stands to reason that I am seeing prices that are all over the place and have broken from the established .99 norm because this data is being fed into algorithms that spit out what I would pay versus you for, "The Beatles 20th Hits Album." Ultimately, this is not especially fair and is prone to error. For example they could mistakenly come to believe i am better off than I am because I happened to have bought an iMac on Amazon. They cannot know that it was an early pension disbursement that made that possible. So no, I am not in a good position to pay 10.27 for somebody's hits while somebody else who actually is out there earning more than I get may see a price of say, 9.42 for the very same music.

Something I need to do in fairness to validate some of my assumptions beyond the reading I've done on this subject is to try it out right here at home. I haven't felt like bothering but I could create a new Amazon account with a different email and not furnish any payment information initially. I could then create test wish lists in both accounts. Without turning tracking back on here, that might be enough to just test the waters and see if prices differ or not. I know this is about as basic as it gets and to call it research is a real stretch but still, it would be at least a little telling. I wonder too if sans tracking data I might see all default x.99 prices at first too. To try to control this the email account would need to be a dummy one somewhere I don't even have one at all. Outlook.com would work nicely here. :D

Anyway, sorry I went on so long but that is my own approach and I've never been infected with anything since the PC-XT although that also goes back to BBS systems pre-web. Obviously, the approach and software evolved over time. Even running the high priority target Windows I never had a problem.

It's worth remembering that end users are not for the most part targets of the really nasty hacks out there. It is point of sale systems, banking systems, governmental data around the world, corporate trade secrets, credit card info, etc. In the grand scheme of hacking and malware we are small potatoes.

Try Avira I would say. It's free. It might help. It doesn't impact performance. That said, safe habits will get you a lot further and nothing but nothing will protect you better than redundant backups locally with really important data residing in the cloud as well. In this way, a nuke can drop on your house and as long as you are far away when it happens, you will at least still have your data.
 
Last edited:
More? Really? OMG.

I just wanted to say that if anybody wants to discuss tracking further, we shouldn't derail this thread to do it. I said as much as I did about it not to spark discussion over it but to explain why it features for me as an issue of some importance in connecting to the outside world of the net.

If somebody wants to refute anything I said about tracking, correct me if I am wrong about something or just talk further about that in general by all means start a thread and link to it here if you want me to show up and spam some more.
 
Thanks Dirtyharry50, I think I'll give Avira a shot then and see how it goes.

I'm also not a fan of these companies collecting your info. Several reviews of Avast said that Avast forwards all your web requests through one of their proxies, installs a browser plugin and uses curl to collect information / for data aggregation. I haven't personally tried Avast so I can't speak to the validity of these claims, but enough people seemed to report similar experiences that I think I'll probably stay away from it.

I'm thinking it might be about time I purchase a program like Little Snitch.
 
Thanks Dirtyharry50, I think I'll give Avira a shot then and see how it goes.

I'm also not a fan of these companies collecting your info. Several reviews of Avast said that Avast forwards all your web requests through one of their proxies, installs a browser plugin and uses curl to collect information / for data aggregation. I haven't personally tried Avast so I can't speak to the validity of these claims, but enough people seemed to report similar experiences that I think I'll probably stay away from it.

I'm thinking it might be about time I purchase a program like Little Snitch.

The Avast for Mac is fully configurable. You can turn off any part you don't like. Turn off the web shield or just https but keep the Mail and filesystem shields. The browser plugins (half ghostery half safeweb) uninstall just like any other.
 
The Avast for Mac is fully configurable. You can turn off any part you don't like. Turn off the web shield or just https but keep the Mail and filesystem shields. The browser plugins (half ghostery half safeweb) uninstall just like any other.
..and although they're not complete yet, it seems Avast is taking a solid lead in the 2015 AV Comparatives tests.

http://chart.av-comparatives.org/awards.php?year=2015

I think I'll be giving this a run for a while to see how it gets on with my system.
 
ClamXav is no longer on the Mac App Store. It's pay or nothing. I don't know how long the MAS version will get updates for existing users.
 
If you don't hit the "Check for ClamXav Updates" button then application won't upgrade to the paid version, it will stay at ver. 2.7, remain fully functional and will even update the virus definitions.

Yes, but like with the MAS version, how do you know you're getting ALL the updated definitions and how long until you don't?
 
The Avast for Mac is fully configurable. You can turn off any part you don't like. Turn off the web shield or just https but keep the Mail and filesystem shields. The browser plugins (half ghostery half safeweb) uninstall just like any other.

Can you set up a scheduled scan? On demand scan on an individual file you select?
 
I've now installed Avast and have an immediate first impressions fail to report:

In the configurations, if you don't select "auto update program" you're informed that "you are not protected"! Which feels a bit like you're being told to select the option or not be protected - and this despite signature updates being set to auto-update. It's what I want to deselect most of all after the last ClamXav update.

I still intend to give it a chance, but felt I'd register my initial disappointment.

Screen Shot 2015-07-22 at 14.32.22.png
 
  • Like
Reactions: ardent73
Some folk seem to be hung up on whether a Mac can get a Virus or Not, with the same old arguments - I don't know what the thinking is, but every time someone posts regarding Mac Virii or Malware, the same group of members congregate in the thread as though they have an investment in the virus industry - you're getting repetitive and boring! Please allow others to discus the subject without feeling the need to "clarify the difference between malware and virus" as though others haven't heard it a thousand times before. Knowing the difference doesn't make anyone here a genius and I think it has been proven that IT IS POSSIBLE for OS X to get a VIRUS ...whether there's currently any out there or not! but that's not even the point of the post.

The question is: Is ClamXav worth the price the Dev is now charging for it or is it not? simple really.
OK. This is just plain wrong. There is a continual influx of Mac newbies who not understand the various categories of malware. They do not know that there are no OS X viruses in the wild. There are also members of this forum like yourself who try to confuse them.
 
corrected that for you. :cool:
You haven't altered or corrected anything, the meaning is still the same.

He already put a qualifier on there that to any IT competent person should indicate that it could be subject to change.

Regarding the malware situation, it seems that a large majority of the finds are phishing emails. Do you need AV to avoid phishing emails?
 
You haven't altered or corrected anything, the meaning is still the same.

He already put a qualifier on there that to any IT competent person should indicate that it could be subject to change.

Regarding the malware situation, it seems that a large majority of the finds are phishing emails. Do you need AV to avoid phishing emails?
Any IT competent person would also acknowledge that it is possible for OS X to become infected with a Virus in the future. MisterMe & some others (include yourself here DKZ) of longstanding Mac ownership continually refuse to admit the possibility - no matter how unlikely the scenario may be, and this sets alarm bells ringing for me ...it's deceitful.

You guys are like the Mercedes salesman insisting he's selling the best car available, so you don't need to test drive an Audi or BMW because he's already told you a dozen times it's unnecessary. Should we all become smug, arrogant, blinkered and selfish in order to keep him happy?

Oh, and quite a few have received an email virus from an infected Windows owning friend, not passing it on is called being considerate of others.

Here's the thing you need to understand: You did not pay for other people's machines, so you do not control them! No matter how much you guys try to bully & belittle those that choose to run anti-virus software on their Macs, it remains the choice of the owner.

Why so dead set against protection additional to Apple's? I won't ask if you guys get bored trolling anti-virus threads, because it's obvious you don't.
 
Last edited:
  • Like
Reactions: throAU
Any IT competent person would also acknowledge that it is possible for OS X to become infected with a Virus in the future. MisterMe & some others (include yourself here DKZ) of longstanding Mac ownership continually refuse to admit the possibility - no matter how unlikely the scenario may be, and this sets alarm bells ringing for me ...it's deceitful.

I agree. Viruses on a Mac are a very real possibility. I just read an article (linked at the bottom of this reply) about a bug in the latest version of Mac OS X that can give a user root access. This is exactly how viruses propagate. This could also be used to install root kits on a Mac OS X machine. There is already a proof of concept attack out in the wild so people can and are exploiting this bug. The funny thing is this is not the first time this has happened on Mac OS X so those saying it is impossible to write a virus or malware for Mac OS X clearly don't know what they are talking about. Once you have root access to a Mac OS X machine you can install whatever you like automatically whether that be a virus, trojan, root kit or malware.

http://arstechnica.co.uk/security/2...x-gives-attackers-unfettered-root-privileges/
 
  • Like
Reactions: Artimus12
Can you set up a scheduled scan? On demand scan on an individual file you select?
I don't like to schedule scans personally, but I looked for it and couldn't find it, so this seems to be on demand only beside the active file scanning.
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.