Answer the question
In order to leave comments, you need to log in
A
A
Alexey Kalinin2014-10-18 22:17:11
Alexey Kalinin, 2014-10-18 22:17:11
How to check for the presence of a string when scanning ClamAV from its signatures?
The question is how to scan ClamAV not by the full sample of the file, but by the presence of a specific code? For example, there is a file with a size of 494 bytes. It is added to the signature database by MD5 hash and size "a4cb4d606c77da0aa9c687e378bb89ee:494:global.php" With this type of addition, there are files that contain only this code, if we add a couple of characters, there will be no triggering.
Similar questions
V
S
S
B
A
Didn't find what you were looking for?
Ask your questionAsk a Question
731 491 924 answers to any question