A
A
Alexey Kalinin2014-10-18 22:17:11
Information Security
Alexey Kalinin, 2014-10-18 22:17:11

How to check for the presence of a string when scanning ClamAV from its signatures?

The question is how to scan ClamAV not by the full sample of the file, but by the presence of a specific code? For example, there is a file with a size of 494 bytes. It is added to the signature database by MD5 hash and size "a4cb4d606c77da0aa9c687e378bb89ee:494:global.php" With this type of addition, there are files that contain only this code, if we add a couple of characters, there will be no triggering.

Answer the question

In order to leave comments, you need to log in

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question