Re: Re: Simple virus checker...

File::Scan does not use the open source virus database - As it is, File::Scan has a very limited number of definitions, approximately 100 or so, all of which are primarily implemented as regular expressions within the module file.

perl -le "print+unpack'N',pack'B32','00000000000000000000001010001100'"

Comment on Re: Re: Simple virus checker...

Replies are listed 'Best First'.
Re: Re: Re: Simple virus checker... by zentara (Cardinal) on Nov 12, 2003 at 17:46 UTC
Hmm, well you might be right that it does not use the entire open source database, but if you compare File::Scan's signature.txt and the virus.db of clamscan, they are almost the same, except for some formatting. As a matter of fact, when I first played with File::Scan, I imported the open source virus database into it's signature's.txt file. With such a huge signature file, File::Scan was so slow it was unusable, where clamav remained quite fast. Virus scanning is still best done with c.	[reply]

Replies are listed 'Best First'.

Re: Re: Re: Simple virus checker...
by zentara (Cardinal) on Nov 12, 2003 at 17:46 UTC

Hmm, well you might be right that it does not use the entire open source database, but if you compare File::Scan's signature.txt and the virus.db of clamscan, they are almost the same, except for some formatting. As a matter of fact, when I first played with File::Scan, I imported the open source virus database into it's signature's.txt file. With such a huge signature file, File::Scan was so slow it was unusable, where clamav remained quite fast. Virus scanning is still best done with c.

[reply]