ClamAV will match on multiple signature types. By default it will only alert on the first match, but you can configure this differently.
-- Joel Esler | Talos: Manager | [email protected]<mailto:[email protected]> On May 19, 2017, at 12:52 PM, Abdullah AL-Mutairy <[email protected]<mailto:[email protected]>> wrote: hello everyone i can see that there are different types of signatures in clamAV. there is md5 hashes, rules, byte signatures.. etc when I do a scan on a file, does clamav extract only one of signature of the file or does it extract multiple of signatures of the same file and then compare it with all types of signatures? thanks! _______________________________________________ clamav-users mailing list [email protected]<mailto:[email protected]> http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml _______________________________________________ clamav-users mailing list [email protected] http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml
