|
topix93
| Joined: 15 Mar 2012 |
| Posts: 0 |
|
|
|
 Posted: Thu Mar 15, 2012 6:53 pm |
|
 |
 |
|
|
14200:917cb8a3d1d9eb24af6c5bcf3bf7e401:Trojan.Downloader-1420
this is a record of the signatures databse.
my question is: what is the first field? is it a counter?
|
|
|
|
GuitarBob
| Joined: 09 Jul 2006 |
| Posts: 9 |
| Location: USA |
|
|
| Posted: Thu Mar 15, 2012 7:31 pm |
|
|
|
|
|
The first field is the byte size. In this case, it is 142K.
Regards,
|
|
|
|
topix93
| Joined: 15 Mar 2012 |
| Posts: 0 |
|
|
|
| Posted: Thu Mar 15, 2012 7:56 pm |
|
|
|
|
|
so this records 18432:c0c5c976ca6fc4b0407e14e2fcbe81cf:Trojan.Spybot-288 means that the virus size is 184 kB?
|
|
|
|
GuitarBob
| Joined: 09 Jul 2006 |
| Posts: 9 |
| Location: USA |
|
|
| Posted: Fri Mar 16, 2012 12:07 am |
|
|
|
|
|
You wrote:
"so this records 18432:c0c5c976ca6fc4b0407e14e2fcbe81cf:Trojan.Spybot-288 means that the virus size is 184 kB?"
No, it means that the file that includes the virus is 18K (18,432 bytes). I was wrong about the size in my previous post--it was 14K instead of 142K. Sorry!
Regards,
|
|
|
|
topix93
| Joined: 15 Mar 2012 |
| Posts: 0 |
|
|
|
| Posted: Fri Mar 16, 2012 1:42 pm |
|
|
|
|
|
thank you, i have another question.
i this db, is the signature the key?
|
|
|
|
GuitarBob
| Joined: 09 Jul 2006 |
| Posts: 9 |
| Location: USA |
|
|
| Posted: Fri Mar 16, 2012 3:45 pm |
|
|
|
|
|
I do not know what the key is in the DB. The Clam DB is a bit hard to crack unless you know what you are doing. Are you planning on using the DB in some sort of antivirus program? If so, remember that it is Open Source, and you must abide by the requirements. Read up about them.
Regards,
|
|
|
