[clamav-users] Read the signature in cdiff file.

[Reindl Harald]

Am 29.01.2018 um 11:24 schrieb Arul Raj:
> Yes after downloaded they are immediately integrated into the appropriate
> .cld file. Just to my knowledge, i want to know what type of signature
> content added.
> 
> For Example. In version 22445 contains some signature and the next version
> 22446 version dropped that signature. If I search for that dropped
> signature, I get the virus name/type only.  I don't get that particular
> hash/pattern for that virus name.
> 
> That's why I ask how to read the .cdiff in a human-readable format?

you assume that malware signatures are human-readable at all

> On Mon, Jan 29, 2018 at 3:25 PM, Al Varnell <alvarnell at mac.com> wrote:
> 
>> Just trying to figure out why anybody would ever need to. As soon as they
>> are downloaded they are immediately integrated into the appropriate .cld
>> file where they can be read.
>>
>> Subscribe to the clamav-virusdb e-mail list if you want to see a list of
>> what signatures are contained in a particular .cdiff file:
>> <lists.clamav.net/cgi-bin/mailman/listinfo/clamav-virusdb>.
>>
>> -Al-
>>
>> On Mon, Jan 29, 2018 at 01:26 AM, Arul Raj wrote:
>>> Hi Team,
>>>
>>>     Can you please share, how to read the cdiff signature file in
>>> human-readable format