To whom it may concern,
Thanks for the help from Edwin, kgd and guenther, I have solved the problem
with wildcards, such as *, ??, {n}, {n-}, {-n}, etc, in ClamAV's signatures.
But there is still a problem. When I tried to build a signature with the
wildcard of |, I still didn't succeed. The signature of mine is like this:
Worm.Yawen (Clam)=(6161|6262)
I want to use this signature to match "aa" or "bb". It is reported a
Malformed database ERROR: Malformed database.
Do you have any comments on this issue?
Thanks.
Best regards,
Xue Wen
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html
