ClamWin Free Antivirus :: View topic - What exactly is Bytecode detection / bytecode.cvd ?

Posted: Sat Jun 19, 2010 11:38 pm

v0.96 wrote:

Bytecode detection signatures allow more complex patterns and better detection

It means having to download bytecode.cvd, but what does it actually do? And why isn't it mentioned in the about screen (like main/daily.cvd)?

Posted: Sun Jun 20, 2010 1:06 am

Bytecode is sort of like a programming language. Bytecode will allow the Clam AV sigmakers to develop complex signatures that should detect more variants of a malware than has been possible for them in the past. Bytecode can also allow some quick changes in the Clam AV code.

Bytecode has not been fully implemented yet. There are some problems with the bytecode interpreter, and there have not been any bytecode classes for the sigmakers.

Regards,

Posted: Mon Jun 13, 2011 2:57 pm

GuitarBob wrote:

Bytecode is sort of like a programming language. Bytecode will allow the Clam AV sigmakers to develop complex signatures that should detect more variants of a malware than has been possible for them in the past. Bytecode can also allow some quick changes in the Clam AV code.

Bytecode has not been fully implemented yet. There are some problems with the bytecode interpreter, and there have not been any bytecode classes for the sigmakers.

Regards,

I have downloaded the file bytecode.cvd and now i want to unpack that fle.According to the webpage at : https://stackoverflow.com/questions/4965257/hexadecimal-virus-signatures-database
it can be unpacked by stripping out the first 512 bytes and it would become a .tar.gz file.

Here is the bytecode.cvd file: https://db.local.clamav.net/bytecode.cvd
Can any one please delete the first 512 bytes of this file and send back the .tar.gz file ?