On Thu, Dec 19, 2013 at 7:35 AM, 黄海涛 <hht...@126.com> wrote: > 1. Do you have a commonly-used（popular） virus list? > > Yes, here: http://www.clamav.net/lang/en/download/cvd/malware-stats/
> > 2. Can we get the added time(the time of inserting into the virus > database) of every virus, or get the time order(insert time) of the > sigature from daily.cvd(or daily.mdb) file?Besides, does it mean that the > last one of the signature in the file means the newest virus? > You can follow signature updates here: http://lurker.clamav.net/list/clamav-virusdb.en.html > > > 3. The cvd file is too large and consume too much memory, our less > advanced device can't run it smoothly, so we have to do a smaller cvd file, > and will delete the old or inactive sigature.Could you give us some > instructions of doing it, and tell us what do we need pay attention to? > > Look into the utility "sigtool" that ships with ClamAV. On a related note, you don't need to have your signatures in a .cvd file. Your signatures just need to be in a files that have the proper extensions for the signature type. See: https://github.com/vrtadmin/clamav-devel/blob/master/docs/signatures.pdf > > 4. Could you tell us the meaning of every section? For example: > "7680:9c554a76ebddc16ce19c46677200f624:Win.Trojan.Vidro-98", this is one > line in the virus list,what's the meaning of these sections: "7680", > "9c554a76ebddc16ce19c46677200f624", "Win.Trojan.Vidro", "98"? And we think > that "Win.Trojan.Vidro" means a category of one virus,and > "Win.Trojan.Vidro-98" represents a specific virus, is this right? > > Information can be found here: https://github.com/vrtadmin/clamav-devel/blob/master/docs/signatures.pdf > > 5. What frequency does clamav release new engine version, do you have a > release-time list of the history virus engine versions? Besides, can the > old virus engine run normally with the newer virus database? > > Older releases can be found here: https://github.com/vrtadmin/clamav-devel/releases I would not recommend running older ClamAV engines. However, some older versions can run the some of the latest signatures > > thanks very much > _______________________________________________ > Help us build a comprehensive ClamAV guide: > https://github.com/vrtadmin/clamav-faq > http://www.clamav.net/support/ml _______________________________________________ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/support/ml
