On 8/5/2010 3:42 PM, Noel Jones wrote:

But it would be easy enough to bypass by changing the cASE of the name or using J. Doe etc. (you might be able to use wildcards to ignore case in the sig)
Can anyone help me figure out how to ignore case so I can catch JoHn SmItH any other variant with just a single entry in the sig file?
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Reply via email to