On 10/30/2012 6:01 AM, Zoltan Gyula Beck wrote: > Dear list members, > > for various reasons I've to mark some mime type files as virus/infected. > It is possible this? If yes, how can I do this? For example all EXE, BAT, > BIN (linux binaries), etc... > > Best Regards, > Zoltan Beck >
Yes, this is possible for windows and linux executable files. BAT files are just text files, so reliable detection is not possible. Docs on writing signatures can be found here http://www.clamav.net/doc/latest/signatures.pdf As for what to use for a signature, executable files have a few bytes near the beginning of the file that identify it as executable to the OS. Look at the "file" utility included with linux and the "magic" database that "file" uses for what to use for a clamav signature. Have fun! -- Noel Jones _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
