Helo Steve,
First at all, thanks for your promptly answer. It works flawlessly.
After some tests I finally found what was wrong with my signatures. I
was using sigtool --hex-dump to build my signatures. I took some time to
realize that sigtool was adding \n to my signatures (identified by the
On 5/23/14, 11:15 AM, Matus UHLAR - fantomas wrote:
On 23.05.14 12:25, Claudio Cuqui wrote:
I would like to known if is it possible to create a virus signature that
match the subject of a mail message. I tried everything and the signature
only match when the pattern is located in the email body
On Fri, May 23, 2014 4:25 pm, Claudio Cuqui wrote:
> Hello there !
>
>
> I would like to known if is it possible to create a virus signature that
> match the subject of a mail message. I tried everything and the signature
> only match when the pattern is located in the email body.
>
Something lik
On 23.05.14 12:25, Claudio Cuqui wrote:
I would like to known if is it possible to create a virus signature
that match the subject of a mail message. I tried everything and the
signature only match when the pattern is located in the email body.
So, would be possible having a signature that mat
Hello there !
I would like to known if is it possible to create a virus signature that
match the subject of a mail message. I tried everything and the
signature only match when the pattern is located in the email body.
So, would be possible having a signature that matchs the subject ?
Regard
On Mon, Nov 12, 2012 at 3:05 AM, zahra tabari wrote:
> Dear Member List,
>
> I have faced with an anti virus project which uses Clam signatures. It
> uses Aho-Corasick algorithm for signature matching. I want to apply a
> replacement for Aho-Corasick algorithm, which has a better performance and
>
Dear Member List,
I have faced with an anti virus project which uses Clam signatures. It uses
Aho-Corasick algorithm for signature matching. I want to apply a replacement
for Aho-Corasick algorithm, which has a better performance and preferably
covers all kinds of signatures (especially .ndb o
_
From: Alain Zidouemba
To: ClamAV users ML
Sent: Sunday, November 11, 2012 7:37 AM
Subject: Re: [clamav-users] Signature Matching
Hdb signatures can be for types of files, not just PEs.
Mdb signatures are only for PEs
Db signatures, again, have been deprecated.
Ndb signatures can be for al
Hdb signatures can be for types of files, not just PEs.
Mdb signatures are only for PEs
Db signatures, again, have been deprecated.
Ndb signatures can be for all types of files, not just PEs.
Similarly, ldb signatures can be for all types of files, not just PEs.
Please refer to: http://www.cla
Dear Member List,
I have faced with an antivirus project which uses Clam signatures. For checking
if a new suspicious file is virus or benign (signature matching phase), it acts
as follows.
If the file is PE Then
Compare it with .hdb & .mdb signatures
If it hasn't yet detected as virus The
Dear Member List,
I'm studying on source code of ClamAV. Which folder ralates to 'Signature
Matching' phase?
Best Regards
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml
11 matches
Mail list logo
