Adding custom signature to ClamAV
Can’t wait to get that signature accepted in the main ClamAV database? Do like this:
1) edit /var/lib/clamav/custom.ndb
2) sigtool –hex-dump a pretty unique text line from the email
3) stick Trojan.Custom.Whatever:0:*:hex output into custom.ndb
4) /etc/init.d/clamd reload
Thanks to Aeriana for the heads-up on this method!