Quoting Tomasz Kojm <[EMAIL PROTECTED]>: > > Exploit.IFRAME.foo:*:494652414d453d??{256-} > > Bad format.
Does this one seem okay? note1: ndb database format: use with v0.80 note2: matches <iframe src=file:// ..{586}.. name=" exploit.iframe.file:3:*:3C696672616D65207372633D66696C653A2F2F{-586}6E616D653D22 Thanks, Steve _______________________________________________ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users