On Wed, 7 Apr 2004, Denis De Messemacker wrote: > > However, i do not agree completely with you. I think that every variant > of a virus should have a signature in the database, even if it is > already detected by some generic signature. > > Why ? Because if we have to remove the generic signature due to some > false positives, the variant virus will no longer be detected. > > So, generic signatures are fine, but I think we should also have signatures > for a maximum of variants.
I almost agree, except for one point: does having extra (unnecessary) signatures slow it down at all? Damian Menscher -- -=#| Physics Grad Student & SysAdmin @ U Illinois Urbana-Champaign |#=- -=#| 488 LLP, 1110 W. Green St, Urbana, IL 61801 Ofc:(217)333-0038 |#=- -=#| <[EMAIL PROTECTED]> www.uiuc.edu/~menscher/ Fax:(217)333-9819 |#=- -=#| The above opinions are not necessarily those of my employers: |#=- -=#| UIUC CITES Security Group || Beckman Imaging Technology Group |#=- ------------------------------------------------------- This SF.Net email is sponsored by: IBM Linux Tutorials Free Linux tutorial presented by Daniel Robbins, President and CEO of GenToo technologies. Learn everything from fundamentals to system administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click _______________________________________________ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
