I guess I don’t know what a “non-normalized ascii file” is. 0d0a is just an ASCII carriage return & line.
It’s also a relatively old signature, so one would hope that if it needed correction that would have happened by now. -Al- On Dec 12, 2015, at 11:50 PM, Arnaud Jacques / SecuriteInfo.com <webmas...@securiteinfo.com> wrote: > Hello Kurt, > >> is detecting as PHP.Shell-83, > > For me PHP.Shell-83 is wrong. It contains 0d0a. It means it has been created > with a non-normalized ascii file. > I guess it should be corrected. > > > Best regards, > > Arnaud Jacques > SecuriteInfo.com
smime.p7s
Description: S/MIME cryptographic signature
_______________________________________________ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml
