Re: Maybe that POS ClamAV isn't so bad.
How do you know your compiler isn't inserting "phone home" code into certain things when it compiles them? Before you say "because I've read my compiler's source code", consider that you picked up a binary of the compiler before compiling anything ... including the compiler. Is that initial binary clean? How do you know?
(Not a new or original concept ... see ken's paper here.)