I am new to CLAMAV & I am just wonder how files are scanned.

 Does it work like:
 1. PE section is taken from file to be scanned
 2. MD5 is calculated
 3. That MD5 is compared to all signatures in ClamAV Database
 4. If match virus is found.

 I have simplified this. But please let me know if I am right in above
 steps for scanning files.

Please submit your patches to our Bugzilla: http://bugs.clamav.net

Reply via email to