[sanesecurity] Re: Sanesecurity.Phishing.Bank

  • From: Daniel McDonald <dan.mcdonald@xxxxxxxxxxxxxxxx>
  • To: <sanesecurity@xxxxxxxxxxxxx>, GrayHat <grayhat@xxxxxxx>
  • Date: Tue, 08 Mar 2011 08:17:25 -0600

On 3/8/11 3:04 AM, "GrayHat" <grayhat@xxxxxxx> wrote:

> 
>> That's one of the clamav limitations - it only records one match.
>> And there is no priority system for "more important" matches, so
>> if a file will hit multiple signatures, a random one will be reported.
> 
> Hmmm... won't the "multiscan" continue scanning even after the first hit
> ?
Not from the description in the man page...


MULTISCAN file/directory
              Scan file in a standard way or scan directory (recursively)
using multiple threads (to make the scanning faster on SMP machines).
 


Other related posts: