ClamXav is good for preventing forwarding an email with Windows malware to Windows users. Newer versions of ClamXav include a daemon that scans email traffic (
EDIT: real-time scanning needs to be configured via ClamXav Sentry; setting in preferences for email is for on demand scanning). Threats to Mac OS X and Linux
would be added to the Clamav database
when they do exist. Threats to older Mac OSes and early Linux distro are in the database already but they are no longer relevant.
I use the ClamXav sentry feature to scan my downloads as well because ClamXav is very lightweight and if further prevents passing Windows malware to others. If your bank requires you to use anti-virus software, I would recommend ClamXav because it is lightweight and Clamav is the default AV scanner in Mac OS X Server so they can't question it's legitimacy.
iAntivirus is good if you think an admin or another individual that knows your password installed a legitimate keylogger program. Install iAntivirus, run it, and then delete it if this is how you think your system was compromised. ClamXav does not include definitions for legitimate software.
XProtect, built into Snow Leopard to detect known trojans, is sufficient enough protection from known trojans. User knowledge is required to protect against novel trojans. Given that 3 of the 4 Mac OS X trojans are included in XProtect, you really do not have that much to worry about.
Actually today there is a Trojan out that is installed via Java and it does not need the user to enter permission password to install, nor to run. Here's a link to the article about it.
ArsTechnica Article on Mac Trojan
Best, and guess we better start looking for some decent AV software and some folks who are attentive to the mac side.
Read the
Intego article.
At the very end it states you can avoid infection by closing the installer. Installer prompts on Mac OS X ask for your password.