Re: [Clamav-users] create signature for ELF

2010-04-14 Thread Moray Henderson
Andre Hübner wrote: >>> So why don't you just submit the sample at clamav.net/sendvirus? > >ok, i did that yesterday but iam afraid this is not the kind of mailware >which will >included in official virus-db. >the other thing is that i already sometimes submitted a virussample but >never got feedba

Re: [Clamav-users] create signature for ELF

2010-04-14 Thread Andre Hübner
Hello, So why don't you just submit the sample at clamav.net/sendvirus? ok, i did that yesterday but iam afraid this is not the kind of mailware which will included in official virus-db. the other thing is that i already sometimes submitted a virussample but never got feedback. i have to be

Re: [Clamav-users] create signature for ELF

2010-04-13 Thread Török Edwin
On 04/13/2010 05:22 PM, Andre Hübner wrote: Sorry, i read digest version and answering creates a new unthreaded mail... Hello, Create a signature for some unique code sequence specific to it for example. yes, i do this for textfiles of all kindes but how to find unique code sequence in a bin

Re: [Clamav-users] create signature for ELF

2010-04-13 Thread Andre Hübner
Sorry, i read digest version and answering creates a new unthreaded mail... Hello, Create a signature for some unique code sequence specific to it for example. yes, i do this for textfiles of all kindes but how to find unique code sequence in a binary file. i think editing/copy/paste with bi

Re: [Clamav-users] create signature for ELF

2010-04-13 Thread Török Edwin
On 04/13/2010 01:51 PM, Andre Hübner wrote: Hello, iam looking for the best way to create a signature on ELF Binaries. Type 6 .ndb signatures, see signatures.pdf. Currently i use a md5-checksum but i dont know this will be enough. Small changes on file results in different checksum. Fore tex