On Tue, 2 Nov 2004 16:11:30 -0800 (PST)
[EMAIL PROTECTED] wrote:
> Matches a case-sensitive regex of: IFRAME={256,}
>
> Exploit.IFRAME.foo:*:494652414d453d??{256-}Bad format. > You can probably all see the problem already. IfRaMe is not cought by > our sig. Does this mean 6! (factorial) additional signatures are > needed to match this? Am I doing this completely wrong somewhere? http://www.clamav.net/doc/0.80/signatures.pdf Section 4.1 (Special files: HTML) > Your thoughts? Please RTM. -- oo ..... Tomasz Kojm <[EMAIL PROTECTED]> (\/)\......... http://www.ClamAV.net/gpg/tkojm.gpg \..........._ 0DCA5A08407D5288279DB43454822DC8985A444B //\ /\ Wed Nov 3 01:31:06 CET 2004
pgpDwVBJYC4he.pgp
Description: PGP signature
_______________________________________________ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
