From: Christos Zoulas Date: Tue, 11 Apr 2000 02:34:38 +0000 (+0000) Subject: add datafellows fsav X-Git-Tag: FILE3_30~4 X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=851384e6870f40c22d87cd13b6447e9eaf15cdf0;p=file add datafellows fsav --- diff --git a/magic/Magdir/fsav b/magic/Magdir/fsav new file mode 100644 index 00000000..76f23569 --- /dev/null +++ b/magic/Magdir/fsav @@ -0,0 +1,25 @@ + +#------------------------------------------------------------------------------ +# fsav: file(1) magic for datafellows fsav virus definition files +# Anthon van der Neut (anthon@mnt.org) +0 beshort 0x1575 fsav (linux) macro virus +>8 leshort >0 (%d- +>11 byte >0 \b%02d- +>10 byte >0 \b%02d) + +8 byte 0x0a +>12 byte 0x07 +>11 leshort >0 fsav (linux) virus (%d- +>10 byte 0 \b01- +>10 byte 1 \b02- +>10 byte 2 \b03- +>10 byte 3 \b04- +>10 byte 4 \b05- +>10 byte 5 \b06- +>10 byte 6 \b07- +>10 byte 7 \b08- +>10 byte 8 \b08- +>10 byte 9 \b10- +>10 byte 10 \b11- +>10 byte 11 \b12- +>9 byte >0 \b%02d)