[clamav-users] detection of really old viruses?

[Al Varnell]

On Sat, Nov 22, 2014 at 06:42PM, Marcel Giannelia wrote:
> 
> Most of the virus definitions in the cvd files don't seem to have dates
> associated with them (at least that I could see with sigtool), so I
> can't tell -- are older definitions ever dropped?
> 
> That is, will clamav always be able to detect viruses from, e.g., the
> 1990s, or are definitions for viruses that old eventually removed from
> the database?

AFAIK, definitions exist forever unless they have been found to cause False Positives.

You can normally find the date a definition was added by searching the clamav-virusdb archive:
<http://lurker.clamav.net/list/clamav-virusdb.en.html>


-Al-
-- 
Al Varnell
Mountain View, CA