Hello.
docs/signatures.pdf specified two same wildcards for different purposes:
a? Match high nibble (high four bits). IMPORTANT NOTE: Nibble
matching is only available in libclamav with the functionality level
15 therefore please only use it with .ndb signatures, each followed
by ":15" (MinEngineFunctionalityLevel, see 2.3.4).
a? Match low nibble (low four bits).
I think this is typo...
--
WBR,
Anton Yuzhaninov
Rambler
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html
