If I want to understand why an email was considered to be a thread due to a particular rule/signature, for example Email.Phishing.Webmail-5, where do I look for more information? I grep'd all the files on my system associated with ClamAV and the only file I could find Email.Phishing.Webmail-5 in was /var/lib/clamav/main.cld.
-- Robert Lopez Unix Systems Administrator Central New Mexico Community College (CNM) 525 Buena Vista SE Albuquerque, New Mexico 87106 _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
