On 18 February 2016 20:14:14 Mehmet Avcioglu <meh...@activecom.net> wrote:
For example I am able to use "^New.Doc.*" to match for "New Doc.xls" but
"^New\sDoc.*" or "^New Doc.*" does not.
> http://www.clamav.net/contact.html#ml
If you look at foxhole databases it should give you an idea, if you want to
block macro malware try badmacro.ndb
Sorry this is brief , I'm on my mobile
Cheers,
Steve
Web: sanesecurity.com
Blog: sanesecurity.blogspot.com
_______________________________________________
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq
http://www.clamav.net/contact.html#ml
