From 5c581c9113c6051a9eff47cc7e564f6632888491 Mon Sep 17 00:00:00 2001
From: Julien (jvoisin) Voisin
Date: Tue, 23 Feb 2016 17:35:29 +0100
Subject: Remove a useless rule

---
 php-malware-finder/malwares.yara | 1 -
 1 file changed, 1 deletion(-)

diff --git a/php-malware-finder/malwares.yara b/php-malware-finder/malwares.yara
index 1a4abf6..45100c5 100644
--- a/php-malware-finder/malwares.yara
+++ b/php-malware-finder/malwares.yara
@@ -64,7 +64,6 @@ rule ObfuscatedPhp
         $c99_launcher = /;\$\w+\(\$\w+(,\s?\$\w+)+\);/  // http://bartblaze.blogspot.fr/2015/03/c99shell-not-dead.html
         $variable_variable = /\${\$[0-9a-zA-z]+}/
         $too_many_chr = /(chr\([\d]+\)\.){2,}?/
-        $b64_concat = /('[A-Za-z0-9=+]*'\.){4,8}?/    
 condition:
         any of them and not IsWhitelisted
 }
-- 
cgit v1.3