[Clamav-users] Is it possible to add signatures to the ClamAV database?
Hello, Just to let everyone know, I have been searching for the answer to this question by using Google and searching on the ClamAV web site but still have not found an answer. I have viewed the information at: www.*clamav*.net/doc/latest/*signatures*.pdf but it still does not show me how to add signatures to the database. The reason I need to create our own signatures, is that the university is getting more phishing specific to the university - Old Dominion University. So, it would not make sense to file these with the CVD database maintainers as it would do no good for anyone else. So, I have been looking for a way to add signatures to the daily.cvd file. I am able to create the signature with sigtool and clamscam detects that I added it but the clamd daemon does not detect it. One document suggests placing the .hdb (signature) file in the ClamAV directory and restarting clamd, and then clamd will read this file. This does not work. Anyhow, if anybody has done this, please let me know. Regards, Darren Old Dominion University Norfolk, VA ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
Re: [Clamav-users] Is it possible to add signatures to the ClamAV database?
Darren G Pifer wrote: Hello, Just to let everyone know, I have been searching for the answer to this question by using Google and searching on the ClamAV web site but still have not found an answer. I have viewed the information at: www.*clamav*.net/doc/latest/*signatures*.pdf but it still does not show me how to add signatures to the database. The reason I need to create our own signatures, is that the university is getting more phishing specific to the university - Old Dominion University. So, it would not make sense to file these with the CVD database maintainers as it would do no good for anyone else. So, I have been looking for a way to add signatures to the daily.cvd file. I am able to create the signature with sigtool and clamscam detects that I added it but the clamd daemon does not detect it. One document suggests placing the .hdb (signature) file in the ClamAV directory and restarting clamd, and then clamd will read this file. This does not work. Anyhow, if anybody has done this, please let me know. You can't add signatures to the clam daily or main files, you create your own extra file. This works - all the various unofficial add-on signatures (such as the excellent http://www.sanesecurity.com/clamav/) rely on this feature of clamav. Yes, the documentation on creating your own signatures is rather skimpy. Some other info here: http://www.sanesecurity.com/clamav/docs.htm -- Noel Jones ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
