Forums
New posts
Search forums
News
Security News
Technology News
Giveaways
Giveaways, Promotions and Contests
Discounts & Deals
Reviews
Users Reviews
Video Reviews
Support
Windows Malware Removal Help & Support
Mac Malware Removal Help & Support
Mobile Malware Removal Help & Support
Blog
Log in
Register
What's new
Search
Search titles only
By:
Search titles only
By:
Reply to thread
Menu
Install the app
Install
JavaScript is disabled. For a better experience, please enable JavaScript in your browser before proceeding.
You are using an out of date browser. It may not display this or other websites correctly.
You should upgrade or use an
alternative browser
.
Forums
Software
Security Apps
Other security for Windows, Mac, Linux
ClamAV signatures
Message
<blockquote data-quote="komir" data-source="post: 876317" data-attributes="member: 80316"><p>Hi, am using Windows 10. </p><p>Need to perform malware scan for some PHP files. </p><p></p><p>Is there any windows program to find malware inside PHP files?</p><p></p><p>If not, I see ClamAV allows adding custom signatures. </p><p>Here <a href="https://malware.expert/signatures/" target="_blank">PHP Malware Signatures to ClamAV - Malware Expert</a> are signatures I want to add.</p><p>1. First I install ClamAV <a href="https://www.clamav.net/documents/installing-clamav" target="_blank">ClamavNet</a></p><p>2. After that, on the bottom of the file C:\Program Files\ClamAV\freshclam.conf </p><p>add signatures</p><p>DatabaseCustomURL <a href="http://cdn.malware.expert/malware.expert.ndb" target="_blank">http://cdn.malware.expert/malware.expert.ndb</a></p><p>DatabaseCustomURL <a href="http://cdn.malware.expert/malware.expert.hdb" target="_blank">http://cdn.malware.expert/malware.expert.hdb</a></p><p>DatabaseCustomURL <a href="http://cdn.malware.expert/malware.expert.ldb" target="_blank">http://cdn.malware.expert/malware.expert.ldb</a></p><p>DatabaseCustomURL <a href="http://cdn.malware.expert/malware.expert.fp" target="_blank">http://cdn.malware.expert/malware.expert.fp</a> </p><p>3. After that, I add file C:\Program Files\ClamAV\database\whitelist.ign2</p><p>4. From the Powershell run scan</p><p>cd "c:\program files\clamav"</p><p> .\clamscan --recursive 'C:\Users\Mirko Lednicki\Downloads\php-malware\'</p><p>(folder php-malware contains some examples of the PHP malware)</p><p>But scan results give</p><p>----------- SCAN SUMMARY -----------</p><p>Known viruses: 6838622</p><p>Engine version: 0.102.1</p><p>Scanned directories: 2</p><p>Scanned files: 11</p><p>Infected files: 0</p><p>Data scanned: 0.76 MB</p><p>Data read: 0.40 MB (ratio 1.90:1)</p><p>Time: 47.163 sec (0 m 47 s)</p><p>What I am doing wrong?</p><p>Please help</p><p>Thank you</p></blockquote><p></p>
[QUOTE="komir, post: 876317, member: 80316"] Hi, am using Windows 10. Need to perform malware scan for some PHP files. Is there any windows program to find malware inside PHP files? If not, I see ClamAV allows adding custom signatures. Here [URL="https://malware.expert/signatures/"]PHP Malware Signatures to ClamAV - Malware Expert[/URL] are signatures I want to add. 1. First I install ClamAV [URL="https://www.clamav.net/documents/installing-clamav"]ClamavNet[/URL] 2. After that, on the bottom of the file C:\Program Files\ClamAV\freshclam.conf add signatures DatabaseCustomURL [URL]http://cdn.malware.expert/malware.expert.ndb[/URL] DatabaseCustomURL [URL]http://cdn.malware.expert/malware.expert.hdb[/URL] DatabaseCustomURL [URL]http://cdn.malware.expert/malware.expert.ldb[/URL] DatabaseCustomURL [URL]http://cdn.malware.expert/malware.expert.fp[/URL] 3. After that, I add file C:\Program Files\ClamAV\database\whitelist.ign2 4. From the Powershell run scan cd "c:\program files\clamav" .\clamscan --recursive 'C:\Users\Mirko Lednicki\Downloads\php-malware\' (folder php-malware contains some examples of the PHP malware) But scan results give ----------- SCAN SUMMARY ----------- Known viruses: 6838622 Engine version: 0.102.1 Scanned directories: 2 Scanned files: 11 Infected files: 0 Data scanned: 0.76 MB Data read: 0.40 MB (ratio 1.90:1) Time: 47.163 sec (0 m 47 s) What I am doing wrong? Please help Thank you [/QUOTE]
Insert quotes…
Verification
Post reply
Top