> Hi all, > > is it possible find anywhere information what "PUA.HTML.Infected.WebPage" > exactly means if it's detected in the file? > > It's look like that it detects files with iframe html tag. > When yes it can detect a lot of files which it's OK and not include any > "bad" > aplication or malware.
Hopefully this will work for you... grep "PUA.HTML.Infected.WebPage" daily.* -h > sig.tmp sigtool --decode-sigs < sig.tmp > decodedsig.tmp cat decodedsig.tmp Cheers, Steve Sanesecurity _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml