And Lo and welcome in this video, I will show you how to fix a problem when using YAARA and PDF passa.
For example, if I have a malicious PDF document called that video and if I try to scan it for this
kind of parameter PDF passer by, QWhy meaning using the file and I'm using the index for here, that
PDF is my pediatrician.
Once again, if I were to scanning like this, you find two areas for error is now use that as a root
error.
Second error is the can opener include the far.
And this area is there are two areas, so we'll deal with the second area of canning opening too far.
So what this means is that you cannot understand the a slash, even though he's he's over there.
I installed my rules in this location.
So this is where I put my YAARA rules in here.
And this is my in index.
Why are you over here?
And then these include following his.
That show which is over here, so by right, you should be correct, that says she should be visible,
but still Eurocurrency.
So in order to fix that, we need to open the index Yaffa and make some amendments to it.
So currently, if you were to look at your index here file, you will find that it is quite a long list
waiting around for finer lines.
And all of them has got this kind of format, a slash relative path.
So we need to change our destructive path to absolute path.
That means we have to change this file and instead of the forward slash, we need to put the absolute
path.
So it was absolute poverty, absolute poverty statute.
It passed to the IRS folder.
So to get that pie, this is a popular WD and you get this.
So we need to take this path and inserted into every single line over here, replace the dot forward,
slash to the path.
Right.
That we can do by hand because there are about four or five hundred lines.
So I written a script to automate it.
So the script is found in Yahoo's files, Yahoo's fixes it file.
So all you need to do is just copy this and put it in your location, maybe in this folder out here.
So I'm going to go to this folder now and see this zero six.
So I will.
The Angel.
Come on.
Is it.
So this No.
One.
So this is the fixie next script, which I written, so inside it you can enter the folder.
Inside.
You have to edit the file
to change its name to the park containing your index.
Yeah, for me, the Puffy's home remarks smell the rules, but for you it may be different.
So you need to change it accordingly.
I have created
MiFi here to give you some instructions on how you can edit it.
So just go and read it.
It tells you that if your POV is not same like mine, then you need to change this accordingly.
So if your path, my path assumes that I'm I'm having this path to Maru's.
So that's why this instruction is like this.
But if your path is different, for example, your path is like this.
They're not homeowners who are rules, then you should edit your online as follows like this.
OK, just changing accordingly.
After that you have to make this executable.
So to make the file executable, you need it doesn't need to file is not executable.
So to me, executable, you see, and the executable to the script and now you check it again is nice,
as you can see how that works and then make sure that this file.
Now you need to copy into the same folder as your index.
Yeah.
So your index here is in the arrows for folder.
Indexes here.
So you need to copy this file there, so you go to your IRS screen copy, put it inside your Yahoo's
folder that contains your index here, petechia.
There you go.
After that, you can execute it.
So just change the folder into your Yahoo!
Folder.
Make sure that it is De Index.
Check your fix.
Fixing then you can ask them, is clear the screen so executed, just fix fixing nice and execute it.
So now if you were to change your index here, you will find that now the downfall of Slash has been
replaced by an absolute path.
Zero.
All of it.
So now if you were to run the Cimperman, you get rid of the second error by the first error.
Still persist.
Let's check it out.
So you fixed the second error.
Now we have to fix this error as a result.
Now, this has caused a error in line for a tree.
So if you go to the food for the malware as a rule.
So if you go to the the malware and open up.
More as a rule.
This one.
And you hit over to line twenty three, say in far few names think lying to any tree over here, line
twenty three, this is your area, as I see.
Right, Kyouko is not installing this Linux, I'm using Ram Doximity, so in order to fix that, you
need to get rid of any references to coocoo.
So to do that and just modify this file, taking away D-line, delete all this line after here like
this and also delete this line.
All right.
Now, if you want to take the trouble to do it, you can just copy the editor and overwrite so on.
So maybe that's easier for you.
So I've already got the file editor inside the Yellow Rose Hieroglyphics folder.
So you just take the officeholder I or the editor for you copy this and will write the version that
you have in your Uros malware folder over here and here to replace it.
So just replace and should be done soon after every place that you can run this command.
And see what happens and is not working, so this is how you solve this error in the Yarra rules when
you are using the passer Fidesz violation to Kenyata while running Professor.
OK, I hope this was helpful to you.
So thank you for watching.
See you the next one.