I seem to recall I have come across this before, but I just can't find it. Maybe someone knows off-hand. :)
When using additional, third party signatures, is there any particular order in the signatures? If both, the official as well as the third party sigs match, which one is being reported? karsten -- char *t="[EMAIL PROTECTED]"; main(){ char h,m=h=*t++,*x=t+2*h,c,i,l=*x,s=0; for (i=0;i<l;i++){ i%8? c<<=1: (c=*++x); c&128 && (s+=h); if (!(h>>=1)||!t[s+h]){ putchar(t[s]);h=m;s=0; }}} _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html