2

I want to read the contents of a .CVD file (Clam AV database file).

How can I do this? I tried deleting the first 512 bytes of the file and then rename it to .tar.gz but it won't open.

Oliver Salzburg
  • 86,445
  • 63
  • 260
  • 306
Pouyan Izadi
  • 21
  • 1
  • 2
  • What do you want to do with it? Clam AV has libraries that you can use to read at least some of the data from the CVD files. – haimg Dec 13 '11 at 19:41
  • i want to create an antivirus.so i need the database to open and read the signatures – Pouyan Izadi Dec 20 '11 at 09:36

3 Answers3

2

Here is the best way to strip the header:

dd if=clam.cvd of=clam.tar.gz bs=512 skip=1

Then you can use tar to extract:

tar xzvf clam.tar.gz
Paul
  • 59,223
  • 18
  • 147
  • 168
1

ClamAV comes with a tool to verify and also extract database files called sigtool. To extract you can run

sigtool -u clam.cvd

which will extract the files in the current directory.

Kris
  • 11
  • 1
0

I wrote a little golang package that downloads and extracts parts of the clamwin mdb files.

https://github.com/codeallthethingz/clamwin-downloader

Will
  • 101
  • 2