[clamav-users] signature processing order

[Al Varnell]

On May 24, 2016, at 5:37 AM, "Arnaud Jacques / SecuriteInfo.com" wrote:
>> As for "removing" a 3rd party signature when official ones block it,
>> well... overall... it wouldn't really be a good idea.
> 
> Why ?
> 
> Clamav official signatures + all 3rd party signatures needs a lot of system RAM. Optimizing 
> our signatures to scan faster and use less RAM should be a priority. Am I wrong ?

Because the signatures may not be identical and could be looking for two different things so that a variant of the original malware that could be caught by one sig will be overlooked by the other.

-Al-