I want to read the contents of a .CVD file (Clam AV database file).
How can I do this? I tried deleting the first 512 bytes of the file and then rename it to .tar.gz but it won't open.
I want to read the contents of a .CVD file (Clam AV database file).
How can I do this? I tried deleting the first 512 bytes of the file and then rename it to .tar.gz but it won't open.
Here is the best way to strip the header:
dd if=clam.cvd of=clam.tar.gz bs=512 skip=1
Then you can use tar to extract:
tar xzvf clam.tar.gz
ClamAV comes with a tool to verify and also extract database files called sigtool. To extract you can run
sigtool -u clam.cvd
which will extract the files in the current directory.
I wrote a little golang package that downloads and extracts parts of the clamwin mdb files.