On Fri, 15 Dec 2006 10:28:14 -0800
"Christian Chita" <[EMAIL PROTECTED]> wrote:

> Hi all,
> 
> As of this morning, I am seeing this particular signature:
> 
> ===>
> Exploit.CVE_2006_4182:1:EP+0:b800{-480}ffff01009730000068c202005a4e0000f
> fff01009730000068c202005a4e0000ffff01009730000068c202005a4e0000ffff01009
> 730000068c202005a4e0000ffff0100:0:9
> <===
> 
> The ':0:9' at the end of the signature do not seem right; no other
> signature has this syntax.
> 
> I would appreciate a confirmation whether this is a new syntax, or else
> I am getting something totally wrong.

http://cvsweb.clamav.net/bin/cgi/viewvc.cgi/clamav-devel/docs/signatures.pdf?revision=1.8

> Many thanks,
> christian

-- 
   oo    .....         Tomasz Kojm <[EMAIL PROTECTED]>
  (\/)\.........         http://www.ClamAV.net/gpg/tkojm.gpg
     \..........._         0DCA5A08407D5288279DB43454822DC8985A444B
       //\   /\              Fri Dec 15 19:35:52 CET 2006
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html

Reply via email to