[clamav-users] signature processing order

[Groach]

6 for one, half a dozen for the other.

(A great advert, though.  Well done.)



On 24/05/2016 23:29, Arnaud Jacques / SecuriteInfo.com wrote:
> Hello Al,
>
>> Because the signatures may not be identical and could be looking for two
>> different things so that a variant of the original malware that could be
>> caught by one sig will be overlooked by the other.
> This can not happened with Securiteinfo.com sigs. We remove signatures when
> Clamav official detect malwares, based on hundred of samples.
>
> That's the only way to keep the number of signatures the lowest possible.
>
> If 3rd party providers don't do that, they are condemned to have more and more
> signatures everyday, until it breaks low memory systems.
>