[prev in list] [next in list] [prev in thread] [next in thread] 

List:       clamav-users
Subject:    Re: [Clamav-users] Feature Request Scanlist
From:       James Kosin <jkosin () beta ! intcomgrp ! com>
Date:       2009-01-29 14:01:33
Message-ID: 4981B6BD.4060806 () beta ! intcomgrp ! com
[Download RAW message or body]

[Attachment #2 (multipart/signed)]


Tomasz Kojm wrote:
> On Thu, 29 Jan 2009 13:26:29 +0100
> Andre Hübner <andre.huebner@gmx.de> wrote:
<snip>

>> with fileselection which is base for clamscan.
>> Thsi fileselection could be reduced by date of creation, special filetypes, 
>> chmod, whatever...
>> Sure, a complete scan should also be done, but to get fast results or to do 
>> quick automated scans of suspicious files this could be a nice feature.
>>
>> How about that?
> 
> Please search the archives; it was already described how to use clamdscan
> for that purpose.
> 

You also have to be careful.  The date/time of creation or modification
can be faked or changed.  So, I wouldn't rely entirely on that alone to
determine what files to scan and which not to scan.

James


["signature.asc" (application/pgp-signature)]

_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

[prev in list] [next in list] [prev in thread] [next in thread]