Hello Kurt, > is detecting as PHP.Shell-83,
For me PHP.Shell-83 is wrong. It contains 0d0a. It means it has been created with a non-normalized ascii file. I guess it should be corrected. Best regards, Arnaud Jacques SecuriteInfo.com Facebook : https://www.facebook.com/pages/SecuriteInfocom/132872523492286 Twitter : @SecuriteInfoCom _______________________________________________ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml
