[clamav-users] signature processing order
alvarnell at mac.com
Tue May 24 16:06:47 EDT 2016
On May 24, 2016, at 5:37 AM, "Arnaud Jacques / SecuriteInfo.com" wrote:
>> As for "removing" a 3rd party signature when official ones block it,
>> well... overall... it wouldn't really be a good idea.
> Why ?
> Clamav official signatures + all 3rd party signatures needs a lot of system RAM. Optimizing
> our signatures to scan faster and use less RAM should be a priority. Am I wrong ?
Because the signatures may not be identical and could be looking for two different things so that a variant of the original malware that could be caught by one sig will be overlooked by the other.
More information about the clamav-users