--- "Robert G. Werner" <[EMAIL PROTECTED]> wrote:Joanna Roman wrote:The source code is there. What are you missing?At least we still don't know how virus signatures and patterns are created ? Will that ever be disclosed ?
If I gave you a .exe file that has virus, how do you extract the virus signature from the .exe file ? I dont think I know how to do it ?
http://www.clamav.net/doc/0.75/signatures.pdf
They removed the functionality in 0.80 and above, but that's because it's simplest for users to create md5 signatures of unknown binaries (and the automatic signature generation depended on having another virus scanner detect it already anyway). Of course, you can also create signatures by hand, which isn't that difficult once you've read the .pdf file for the format.
About the only thing we *can't* do is create a .cvd file that is signed by the original authors. But if the project were forked, that would be trivial to fix also (requires a one-line change to the source code).
Damian Menscher -- -=#| Physics Grad Student & SysAdmin @ U Illinois Urbana-Champaign |#=- -=#| 488 LLP, 1110 W. Green St, Urbana, IL 61801 Ofc:(217)333-0038 |#=- -=#| 4602 Beckman, VMIL/MS, Imaging Technology Group:(217)244-3074 |#=- -=#| <[EMAIL PROTECTED]> www.uiuc.edu/~menscher/ Fax:(217)333-9819 |#=- -=#| The above opinions are not necessarily those of my employers. |#=- _______________________________________________ http://lurker.clamav.net/list/clamav-users.html
