On Wed, Jul 27, 2005 at 12:31:45PM -0700, [EMAIL PROTECTED] wrote: > q# wrote: > > $ echo 'Zip.Empty:0:*:0:0:00000000:0:1:1' > ./local/empty.zmd > > Checking the documentation: > http://www.clamav.net/doc/latest/signatures.pdf > > This is the "Extended signature format" > > Zip.Empty - name of malware > 0 - target type: 0 = any file > * - offset: * = any > 0 - ? > 0 - ? > 00000000 - ? > 0 - ? > 1 - ? > 1 - ? > > Your sig doesn't seem to match the published doc format. > > What does sigtool -i ./local/empty.zmd say? ^^^^ Wrong signature format: zmd != ndb
-- best regards q# _______________________________________________ http://lurker.clamav.net/list/clamav-users.html
