Page 1 of 1

Duplicate Yara signature?

Posted: 09 Feb 2017 12:07
by ovizii
Is this a problem?

Code: Select all

[root@efa spamassassin]# locate Javascript_exploit_and_obfuscation.yar
/var/lib/clamav/Javascript_exploit_and_obfuscation.yar
/var/lib/clamav-unofficial-sigs/dbs-yara/Javascript_exploit_and_obfuscation.yar

[root@efa spamassassin]# ls -al /var/lib/clamav/Javascript_exploit_and_obfuscation.yar
-rw-r--r-- 1 clam clam 3617 Jan 10 16:01 /var/lib/clamav/Javascript_exploit_and_obfuscation.yar

[root@efa spamassassin]# ls -al /var/lib/clamav-unofficial-sigs/dbs-yara/Javascript_exploit_and_obfuscation.yar
-rw-r--r-- 1 clam clam 3617 Feb  9 12:39 /var/lib/clamav-unofficial-sigs/dbs-yara/Javascript_exploit_and_obfuscation.yar

Re: Duplicate Yara signature?

Posted: 17 Feb 2017 23:30
by shawniverson
Shouldn't be, are you seeing any issues? Clam should consolidate them.

Re: Duplicate Yara signature?

Posted: 18 Feb 2017 07:12
by ovizii
I haven't noticed any issues, just found this while poking around.