Does anyone know of a tool that would take strings in a hex signature and turn them into appropriate wildcards? For instance, I want to strip out all the "http://"; and "https://"; and replace them with {7-8} to reduce the size of the signature and get more 'useful' strings in the signature? There are other strings as well so it's not just a I've been using sed but it's a little unwieldy and more than occasionally requires manual treatment afterwards.
--Maarten _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
