[LibClamAV] Don't know how to create filter TwinWave.EvilXLL.XLLHellsBells.20211110

[net1]

[LibClamAV] Don't know how to create filter for: TwinWave.EvilXLL.XLLHellsBells.20211110
[LibClamAV] cli_ac_addpatt: cannot use filter for trie

TwinWave.EvilXLL.XLLHellsBells.20211110;Engine:81-255,Target:1;(0&1);786C4175746F4F70656E::aw;68747470{0-1}3A(2F2F|5c5c)63646E2E646973636F72646170702E636F6D(2F|5c)6174746163686D656E7473::aw

It might having an issues with the 3A between {0-1}3A(2F2F|5c5c) being just 1 byte so it should be

TwinWave.EvilXLL.XLLHellsBells.20211110;Engine:81-255,Target:1;(0&1);786C4175746F4F70656E::aw;68747470{0-1}(3A2F2F|3A5c5c)63646E2E646973636F72646170702E636F6D(2F|5c)6174746163686D656E7473::aw

[mwester117]

Push.

Same issue here

[teoberi]

Here too, but without much experience in the area of antivirus signatures I hesitate to make the change proposed by @net1.
However, a reply from @wmetcalf would be welcome.

[wmetcalf]

logically it shouldn't make a difference. Apologies for the slow reply I'll get this updated