On Fri, 06 Jun 2008 01:56:30 +0300
Giorgos Vasiliadis <[EMAIL PROTECTED]> wrote:
> In order to understand the pattern matching procedure of clamav, I
> created a new signature database that contain only one signature
> (test=72706e696674). The hex representation is equal to the string 'printf'.
Hello!
In order to understand the pattern matching procedure of clamav, I
created a new signature database that contain only one signature
(test=72706e696674). The hex representation is equal to the string 'printf'.
However, when I use the clamscan utility to scan binary files, like
/bin/ls an
Hi, doing a scan of my webserver today (with --detect-pua turned on for
grins). I have the Wordpress latest.zip on it, and ClamAV flagged it as
PUA.JS.Packed, as well as the
wp-includes/js/jquery/interface.js: file being flagged as the same (probably
what flagged the zip).
_
Stephen:
2008/6/4 Stephen Gran <[EMAIL PROTECTED]>:
> On Wed, Jun 04, 2008 at 03:24:44PM -0300, Luis Hernán Otegui said:
>> Stephen:
>>
>> Well, it all worked up pretty well, untill I got this:
>>
>> /usr/lib/libc_nonshared.a(atexit.oS)(.gnu.linkonce.t.__i686.get_pc_thunk.bx+0x0):
>> In function `
On Tue, 3 Jun 2008, Dennis Davis wrote:
> From: Dennis Davis <[EMAIL PROTECTED]>
> To: ClamAV users ML
> Date: Tue, 3 Jun 2008 10:50:52 +0100 (BST)
> Subject: Re: [Clamav-users] 0.93.1
> Reply-To: ClamAV users ML
...
> I've just constructed an OpenBSD4.3 port for 0.93.1rc1, installed
> it inst