# VMS backup savesets - gerardo.cacciari@gmail.com
# had to comment out GEM Image and G3 raw data entries due to conflict
-0 byte x
->(0.s+16) string \x01\x01
->>&(&0.b+8) byte 0x42 OpenVMS backup saveset data
->>>40 lelong x (block size %d
->>>49 string >\0 original name '%s')
+#0 byte x
+#>(0.s+16) string \x01\x01
+#>>&(&0.b+8) byte 0x42 OpenVMS backup saveset data
+#>>>40 lelong x (block size %d
+#>>>49 string >\0 original name '%s')
>30 byte 12 (4kB sectors)
# Popular applications
-0 string \xD0\xCF\x11\xE0\xA1\xB1\x1A\xE1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x3E\x00\x03\x00\xFE\xFF Microsoft Installer
+# False positive with PPT
+#0 string \xD0\xCF\x11\xE0\xA1\xB1\x1A\xE1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x3E\x00\x03\x00\xFE\xFF Microsoft Installer
2080 string Microsoft\ Word\ 6.0\ Document %s
2080 string Documento\ Microsoft\ Word\ 6 Spanish Microsoft Word 6 document data
# Pawel Wiecek <coven@i17linuxb.ists.pwr.wroc.pl> (for polish Word)