> You can use 'sigtool -fPUA.HTML.Infected.WebPage' to find and print the > sigs, no need to unpack.
Nice... thanks Edwin: sigtool -fPUA.HTML.Infected.WebPage | sigtool --decode-sigs :) Cheers, Steve Sanesecurity _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml