ClamWin Free Antivirus :: View topic

Posted: Thu Mar 15, 2012 6:53 pm

14200:917cb8a3d1d9eb24af6c5bcf3bf7e401:Trojan.Downloader-1420

this is a record of the signatures databse.
my question is: what is the first field? is it a counter?

Posted: Thu Mar 15, 2012 7:31 pm

The first field is the byte size. In this case, it is 142K.

Regards,

Posted: Thu Mar 15, 2012 7:56 pm

so this records 18432:c0c5c976ca6fc4b0407e14e2fcbe81cf:Trojan.Spybot-288 means that the virus size is 184 kB?

Posted: Fri Mar 16, 2012 12:07 am

You wrote:

"so this records 18432:c0c5c976ca6fc4b0407e14e2fcbe81cf:Trojan.Spybot-288 means that the virus size is 184 kB?"

No, it means that the file that includes the virus is 18K (18,432 bytes). I was wrong about the size in my previous post--it was 14K instead of 142K. Sorry!

Regards,

Posted: Fri Mar 16, 2012 1:42 pm

thank you, i have another question.
i this db, is the signature the key?

Posted: Fri Mar 16, 2012 3:45 pm

I do not know what the key is in the DB. The Clam DB is a bit hard to crack unless you know what you are doing. Are you planning on using the DB in some sort of antivirus program? If so, remember that it is Open Source, and you must abide by the requirements. Read up about them.

Regards,