[clamav-users] Analyzing a possible FP

G.W. Haywood clamav at jubileegroup.co.uk
Fri Feb 7 14:47:19 UTC 2020


Hi there,

On Fri, 7 Feb 2020, Mikael Bak wrote:

> ... What I don't know is what the "{-6}" and the "*" means ...

http://www.clamav.net/documents/body-based-signature-content-format

> Anyway, to me it seems this rule is a bit too general and it is probably a FP.

You're probably right.

-- 

73,
Ged.



More information about the clamav-users mailing list