> The implication of the above is that clamav 0.93 would now > no longer detect many once prevalent viruses for which it > only has hexdump signatures.
The whitespace change will cause slightly lower detection rates on some Third Party sigs too (depending on the sig type)... unless the old sigs are re-written :( Take a peek here... https://wwws.clamav.net/bugzilla/show_bug.cgi?id=780 There's been a large number of changes to the normalisation code, so might be worth taking a peek at the change log. Cheers, Steve _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html
