[clamav-users] Fwd: What is the signature count?

[Al Varnell]

The number is somewhat dependant on options selected in freshclam.conf (e.g. PUA signatures are not always included).

I doubt that anybody can even come close to telling you how many unique malware variants are included in those numbers.

-Al-

> On Oct 10, 2014, at 12:05 AM, Steve Basford <steveb_clamav at sanesecurity.com> wrote:
> 
> 
> On Fri, October 10, 2014 7:05 am, Prasanna Lotke wrote:
>> Can anyone tell me how many signatures does Clam virus database have? Or
>> how many malwares can it detect?
> 
> Not had coffee yet but here's a quick summary of counts....
> 
> Current Official:
> 
> main.cld is up to date (version: 55, sigs: ***2,424,225***)
> daily.cld is up to date (version: 19492, sigs: ***1,194,154***)
> bytecode.cld is up to date (version: 242, sigs: ***46***)
> 
> 3rd Party (distributed by Sanesecurity):
> 
>    684  blurl.ndb
>  12004  bofhland_cracked_URL.ndb
>   1200  bofhland_malware_attach.hdb
>     56  bofhland_malware_URL.ndb
>     98  bofhland_phishing_URL.ndb
>   5000  crdfam.clamav.hdb
>      1  doppelstern-phishtank.ndb
>      1  doppelstern.hdb
>      1  doppelstern.ndb
>    116  foxhole_all.cdb
>     22  foxhole_filename.cdb
>    184  foxhole_generic.cdb
>  48720  junk.ndb
>   4549  jurlbl.ndb
>   3549  jurlbla.ndb
>   2333  lott.ndb
>  24457  phish.ndb
>  15496  phishtank.ndb
>   2506  porcupine.ndb
>   3750  rogue.hdb
>  12183  scam.ndb
>  49823  scamnailer.ndb
>     63  spam.ldb
>     22  spamattach.hdb
>     14  spamimg.hdb
>  15159  spear.ndb
>    878  spearl.ndb
>    360  winnow.attachments.hdb
>      3  winnow.complex.patterns.ldb
>   9993  winnow_bad_cw.hdb
>   5843  winnow_extended_malware.hdb
>      1  winnow_extended_malware_links.ndb
>   3902  winnow_malware.hdb
>   7838  winnow_malware_links.ndb
>   8446  winnow_phish_complete.ndb
>   8445  winnow_phish_complete_url.ndb
>   1467  winnow_spam_complete.ndb
> 
> Total: 249,167
> 
> Cheers,
> 
> Steve