[clamav-users] custom signature error

Emanuel Gonzalez emanuel_gonzalez at live.com.ar
Wed Jan 30 09:03:59 EST 2019


Hello,

I read this document https://blog.clamav.net/2016/06/create-your-own-anti-virus-signatures.html

I need add a signature to database:


# cat 30012019_term_4373.doc | sigtool –hex-dump | head -c 2048 > customsig.ndb

# clamdscan -d customsig.ndb 30012019_term_4373.doc
WARNING: Ignoring unsupported option --database (-d)
/root/30012019_term_4373.doc: lstat() failed: Permission denied. ERROR

----------- SCAN SUMMARY -----------
Infected files: 0
Total errors: 1
Time: 0.000 sec (0 m 0 s)

# clamscan -d customsig.ndb 30012019_term_4373.doc
LibClamAV Error: Problem parsing database at line 1
LibClamAV Error: Can't load customsig.ndb: Malformed database
ERROR: Malformed database

----------- SCAN SUMMARY -----------
Known viruses: 0
Engine version: 0.101.1
Scanned directories: 0
Scanned files: 0
Infected files: 0
Data scanned: 0.00 MB
Data read: 0.00 MB (ratio 0.00:1)
Time: 0.002 sec (0 m 0 s)

# freshclam
ClamAV update process started at Wed Jan 30 11:03:14 2019
main.cvd is up to date (version: 58, sigs: 4566249, f-level: 60, builder: sigmgr)
daily.cld is up to date (version: 25343, sigs: 2228905, f-level: 63, builder: raynman)
bytecode.cld is up to date (version: 328, sigs: 94, f-level: 63, builder: neo)


# clamd --v
ClamAV 0.101.1/25343/Wed Jan 30 02:04:01 2019

any ideas.?

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.clamav.net/pipermail/clamav-users/attachments/20190130/77215f66/attachment.html>


More information about the clamav-users mailing list