Hello,not only the downloaded content is checked, also the uploaded content, as this makes it impossible uploading a file to VirusTotal, when e.g. the following inside a .cdb is active
Sanesecurity.Foxhole.Zip_doc_js:CL_TYPE_ZIP:*:[. -_]([Dd][Oo][Cc])(([. _]){1,})([Jj][Ss])$:*:*:*:*:*:*
(Foxhole_generic.cdb) Greetings, Walter
smime.p7s
Description: S/MIME Cryptographic Signature
_______________________________________________ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml
