I have followed the documentation i've found and created custom database files that identify files that stand alone without a problem using sigtool --md5 <file> > /path/to/custom.db
However when I tested emails containing these files I did not get a positive result. I have tried both the encoded version and unincoded version of the embedded images i'm trying to identify. How might I convince clamav to identify these images if they are embedded in an email? The encoded version is in the file but because there is other content in the file it doesn't come back positive. Carl _______________________________________________ http://lurker.clamav.net/list/clamav-users.html
