Edwin,
Thank you very much for clarifying!
At 7:04 PM +0300 4/26/09, Török Edwin wrote:
>On 2009-04-26 18:21, Tom Shaw wrote:
> > Would be nice to have a wildcard that allowed a range of
>> matching like regex *{6,8}
>>
>
>There are already range wildcards: {6-8}
Thanks. That wasn't in the documentation so I opened a bug report
> > Would be nice to be able to have wildcards to match ascii
>> numbers and ascci letters.
>>
>>
>
>You can use (30|31|32|33|34|35|36|37|38|39) for numbers, and signatures
>for letters can be constructed using multiple signatures in a logical
>signature.
>However if its any letter, why not just skip over it with ??. What is
>the added benefit of matching [a-zA-Z]?
Because its any letter not any character. I have
literally thousands of phish samples that have
signatures similar to \w{7.18}\d{4.6} embedded in
other signatures
Tom
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml
