To whom it may concern, I have tried to understand the signatures in the ClamAV's database. I have succeeded to add a string signature into .db file. And when I tried to add a regular expression into signature, there were some errors. I have referred to the document of signatures.pdf and followed the instructions to add *, ? and | etc, into the hex signatures. But when I used these signature as rule, the error was printed like this:
LibClamAV Error: cli_parse_add(): Problem adding signatures (2). Problem parsing signature at line 1 Problem parsing database at line 1 Can't load daily.db: Malformed database ERROR: Malformed database Are there regular expressions in ClamAV's virus signatures? If so, why can't I add some into them? Thank you very much. Regards, Xue Wen _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html
