tomb.fish at gmail
Dec 2, 2008, 4:59 PM
Post #1 of 1
(769 views)
Permalink
|
|
Re: confirm 878cdf1f1ee11bbfe4f147caa216e145422ff8a2
|
|
Hi,
I am new to CLAMAV & I am just wonder how files are scanned.
Does it work like:
1. PE section is taken from file to be scanned
2. MD5 is calculated
3. That MD5 is compared to all signatures in ClamAV Database
4. If match virus is found.
I have simplified this. But please let me know if I am right in above
steps for scanning files.
Regards,
Tom
_______________________________________________
http://lurker.clamav.net/list/clamav-devel.html
Please submit your patches to our Bugzilla: http://bugs.clamav.net
|
