On 04/12/2010 05:58 PM, Adam Stephens wrote:
Török Edwin wrote:
On 04/12/2010 05:04 PM, Adam Stephens wrote:
I've just been contacted by someone who was having trouble mailing us
because their domain triggers the signatures - but they claim they were
only listed by google for a few hours on March 20th, which seems to be
true.
Which hash is it?
clamscan --debug foo.eml 2>&1|grep ""This hash matched"
LibClamAV debug: This hash matched:
FEC3BE8151DAD00C0113BD510BBDF890D6BA69E39C43FC22EB6C164E440FA06C
You should be able to fix this locally by creating a local.gdb file with
this contents:
S:W:fec3be8151dad00c0113bd510bbdf890d6ba69e39c43fc22eb6c164e440fa06c
I manually dropped this hash from the db for now.
Best regards,
--Edwin
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml
