[clamav-users] Detection in windows but not Linux

[Al Varnell]

I guess I don’t know what a “non-normalized ascii file” is.  0d0a is just an ASCII carriage return & line.

It’s also a relatively old signature, so one would hope that if it needed correction that would have happened by now.

-Al-

On Dec 12, 2015, at 11:50 PM, Arnaud Jacques / SecuriteInfo.com <webmaster at securiteinfo.com> wrote:

> Hello Kurt,
> 
>> is detecting as PHP.Shell-83,
> 
> For me PHP.Shell-83 is wrong. It contains 0d0a. It means it has been created 
> with a non-normalized ascii file.
> I guess it should be corrected.
> 
> 
> Best regards,
> 
> Arnaud Jacques
> SecuriteInfo.com
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3569 bytes
Desc: not available
URL: <https://lists.clamav.net/pipermail/clamav-users/attachments/20151213/1ddb7402/attachment.bin>