Good day, I'm using ClamWin to create my own database, but I noticed that not all signatures are processed.

I use the following command to create signatures:



Here are some signatures that are not processed, ClamWin does not recognize files as infected:


also I noticed that when the file name contains spaces - my command is unable to add the signature, is there any way to improve this?

Thank you!

I solved the problem with spaces, but I don't know what to do with ignoring signatures

The signature format comes from the Clam AV project, and you have to live with it. ClamWin gets everything from a Clam AV Linux port and the developers prepare a Windows port for ClamWin (whenever they care to).

Are you using a custom list of file extensions to scan instead of scanning everything? If so, make sure you include the .php extension in your custom list.

During 5 years of sigmaking with Clam Av as a representative of the Open Source community, I never used sigtool--didn't trust it.

Thanks for using ClamWin. Be aware, however that it appears to be on its last legs. I say this after using it since 2006. I hope you are using it as a backup to a current real-time Av. Microsoft Defender is pretty good and it is free.

Regards,