Darren G Pifer wrote: > Hello, > > Just to let everyone know, I have been searching for the answer to this > question by using Google and searching on the ClamAV web site but still > have not found an answer. I have viewed the information at: > > www.*clamav*.net/doc/latest/*signatures*.pdf > > but it still does not show me how to add signatures to the database. > The reason I need to create our own signatures, is that the university > is getting more phishing specific to the university - Old Dominion > University. So, it would not make sense to file these with the CVD > database maintainers as it would do no good for anyone else. So, I have > been looking for a way to add signatures to the daily.cvd file. I am > able to create the signature with sigtool and clamscam detects that I > added it but the clamd daemon does not detect it. One document suggests > placing the .hdb (signature) file in the ClamAV directory and restarting > clamd, and then clamd will read this file. This does not work. > > Anyhow, if anybody has done this, please let me know.
You can't add signatures to the clam daily or main files, you create your own extra file. This works - all the various unofficial add-on signatures (such as the excellent http://www.sanesecurity.com/clamav/) rely on this feature of clamav. Yes, the documentation on creating your own signatures is rather skimpy. Some other info here: http://www.sanesecurity.com/clamav/docs.htm -- Noel Jones _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
