Attached document? I did not see an attachment. Can you send a link?
Is this the TargetType you are after...
2.3.4 Extended signature format
The extended signature format allows for specification of additional
information such as a target file type, virus offset or engine
version,
making the detection more reliable. The format is:
MalwareName:TargetType:Offset:HexSignature
[:MinEngineFunctionalityLevel:[Max]]
where TargetType is one of the following numbers specifying the type
of the
target file:
0 = any file
1 = Portable Executable
2 = OLE2 component (e.g. a VBA script)
3 = HTML (normalised)
4 = Mail file
5 = Graphics
6 = ELF
7 = ASCII text file (normalised)
And Offset is an asterisk or a decimal number n possibly combined
with a
special modifier:
Source: http://www.clamav.com/doc/latest/signatures.pdf
Cheers,
Steve
Sanesecurity
Hi Steve,
Not sure..... This was in response to Alain Zidouemba's reply to Tom
Shaw. If that information you cited is the same that Alain referred to
then yes.
I was just looking to follow-up on the posted information to increase
my knowledge.
Thanks, Jim
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml
