> # echo word1 | sigtool --hex-dump > 776f7264310a > # echo word2 | sigtool --hex-dump > 776f7264320a > echo word3 | sigtool --hex-dump > 776f7264330a > > Then I have put it into my test.ndb file: > > MyVirus:0:*:776f7264310a*776f7264330a*776f7264330a
Hi, remove the 0a character(s) as echo introduces them into sigtool. ie: MyVirus:0:*:776f726431*776f726433*776f726433 Hope that helps, Cheers, Steve Sanesecurity _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
