[clamav-users] How to decode virus signature

Olivier Olivier.Nicole at cs.ait.ac.th
Fri Sep 11 01:54:21 UTC 2020


Hi,

I have a virus signature that triggers on some of my daily system
security emails. This is not an official ClamAV signature, so my purpose
is not to complain here.

The signature file is a .ndb format and the specific signature is:

BAD_RULE:0:*:3139332e3232382e39312e313233

How can I decode the meaning of the 3139332e3232382e39312e313233 part?

TIA,

Olivier
-- 



More information about the clamav-users mailing list