[clamav-users] Custom signature question

[Steve Basford]

On Tue, July 8, 2014 3:41 pm, alex at alb.de wrote:

> alex:~$ dd if=mp3file.mp3 count=1 | sigtool --hex-dump
> alex:~$ clamscan mp3file.exe


Hi Alex,

In the daily.ftm file, mp3 filetypes are ignored.

0:0:494433:MP3:CL_TYPE_ANY:CL_TYPE_IGNORED

Cheers,

Steve
Sanesecurity