On Sat, 24 Jun 2006 17:33:29 -0400 Nicolas Riendeau <[EMAIL PROTECTED]> wrote:
> > The first two bytes must be 'static', so "(61|41)(6e|4e)" must be replaced > > with two hex numbers (so you may need to use four separate signatures or > > rely on the normaliser as suggested by aCaB). This limitation should be > > removed with the next major version of ClamAV (0.90). > > > > Thank you!! You're welcome! > It looks like I'm not out of the woods yet as it almost looks like every > two bytes there must be a static byte because otherwise I get FPs... Could you provide some examples for such FPs? -- oo ..... Tomasz Kojm <[EMAIL PROTECTED]> (\/)\......... http://www.ClamAV.net/gpg/tkojm.gpg \..........._ 0DCA5A08407D5288279DB43454822DC8985A444B //\ /\ Sat Jun 24 23:42:54 CEST 2006
signature.asc
Description: PGP signature
_______________________________________________ http://lurker.clamav.net/list/clamav-users.html
