On Aug 20, 2012, at 6:46 AM, Henri Salo <he...@nerv.fi> wrote: > Is there a way to configure ClamAV to scan also files with starting > GIF87a/GIF89a? We get attacks like this daily.
I assume you mean detecting PHP files with that at the beginning? -- Joel Esler Senior Research Engineer, VRT OpenSource Community Manager Sourcefire _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
