Login | Register For Free | Help
Search for: (Advanced)

Mailing List Archive: ClamAV: devel

questions about match

 

 

ClamAV devel RSS feed   Index | Next | Previous | View Threaded


l_jian at neusoft

Dec 12, 2006, 4:58 PM

Post #1 of 1 (736 views)
Permalink
questions about match

Hello:
I just join this maillist.
And I have some question about that clamAV match pattern.
1 I read a bit source code, but I think clamAV don't treat a
file as virus if the file only match a hex signature. Only
match a MD5 signature that the file will treated as virus,
isn't it?
2 There exists some virus that can infect all the .exe files.
So, any of these .exe files will treated as virus, can
clamAV check out these files?

Thanks all!

----------------
LIUJ NetEye IPS


----------------------------------------------------------------------------------------------
Confidentiality Notice: The information contained in this e-mail and any accompanying attachment(s) is intended only for the use of the intended recipient and may be confidential and/or privileged of Neusoft Group Ltd., its subsidiaries and/or its affiliates. If any reader of this communication is not the intended recipient, unauthorized use, forwarding, printing, storing, disclosure or copying is strictly prohibited, and may be unlawful. If you have received this communication in error, please immediately notify the sender by return e-mail, and delete the original message and all copies from your system. Thank you.
-----------------------------------------------------------------------------------------------

_______________________________________________
http://lurker.clamav.net/list/clamav-devel.html

ClamAV devel RSS feed   Index | Next | Previous | View Threaded
 
 


Interested in having your list archived? Contact Gossamer Threads
 
  Web Applications & Managed Hosting Powered by Gossamer Threads Inc.