On 06/03/2010 03:42 PM, Steve Basford wrote: > Ooops... forgot the sigtool un-pack bit (note: daily file only) > > sigtool --unpack-current=daily > grep "PUA.HTML.Infected.WebPage" daily.* -h > sig.tmp > sigtool --decode-sigs < sig.tmp > decodedsig.tmp > cat decodedsig.tmp
You can use 'sigtool -fPUA.HTML.Infected.WebPage' to find and print the sigs, no need to unpack. --Edwin _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
