Hi ClamAV Developers,Users As per My Understnading , Virus Signatures are Classified into two types
1.Static Virus Signatures(short/fixed length virus signatures) 2.Dynamic Virus Signatures(long length Signatures with Regular Expression) So I guess, ClamAV performing both Signature Based Scanning and Heuristic Based Scanning for Malware Detection Process Please find below questions that in my mind 1.Does Signature Based Scanner uses only Static Signatures (not Dynamic Signatures) ? 2.Does Heuristic Scanner uses only Dynamic Signatures for Malware Detection? 3. If Herusitc Scanner uses Behaviour Based Approach, why Heuristic Scanner needs Virus Database? 4.To implement Efficient AV Scanner, Can I go with Heuristic Scanning Approach and Excluding Signature Based Scanning Approach? I would like to get help/suggestions from you guys... Kindly waiting for your reply!!!! Thanks, Crazy Thinker, Inc _______________________________________________ http://lurker.clamav.net/list/clamav-devel.html Please submit your patches to our Bugzilla: http://bugs.clamav.net http://www.clamav.net/contact.html#ml
