How to read/extract whats in Clam's safebrowsing.cld or .gdb

I would like to read what's in Clam AV's safebrowsing .cld
(that lists the blacklisted sites).

After following some suggestions online, extracted from
the cld file  the following (using dd & 7zip):
08/11/2018  02:13 PM            18,325 Copying.txt
08/11/2018  02:14 PM       113,037,608 safebrowsing.gdb
08/11/2018  02:14 PM               514 safebrowsing.info

How can we read/extract the gdb file?
sunhuxAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

nociSoftware EngineerCommented:
It looks like they are encrypted Berkeley DB files  or Gnu db files
(db_dump / gdbm_dump) should be able to process those).
Question is what is the password .., you may need to check the clamav sources for that.

DB 5.3 shows the error: BDB0178 Encrypted database: no encryption flag specified/var/lib/clamav/safebrowsing.cvd:
if i try gnu db (gdbm)  gdmb_dump shows: gdbm_open failed bad magic number.
sunhuxAuthor Commented:
I recall long ago that in databases, the message 'bad magic number'
doesn't mean it requires a password but it's something else.

Wonder how Clam AV reads it
nociSoftware EngineerCommented:
Note Berkeley DB is not GDBM... Berkeley claims to recognize the files as being encrypted. GDBM actually claims to not know the files.
Those are different toolsets...

Berkeley DB (appearantly now Oracle:) http://www.oracle.com/technetwork/database/database-technologies/berkeleydb/overview/index.html
GDBM: https://www.gnu.org/software/gdbm/
sunhuxAuthor Commented:
https://fileinfo.com/extension/gdb

or it could be Borland's database:  I'll look for a PC that I could install File Viewer Plus
nociSoftware EngineerCommented:
I have my doubts about Borlands database because clamav is an open source project.

I checked the sources:

there is a readdb.c c source in clamav-0.100.1/libclamav  that has the code to read all files.
It looks like those are specific db files for clamav not linked to any other library.

if you need to read/dump them that source should be your starting point i think.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Anti-Virus Apps

From novice to tech pro — start learning today.