Good afternoon list.
we have been getting bombareded by spam with a single link to random .ru
websites
I have tried creating a signature to match http://hostname.domainname.ru
like /http://odnocw4.pisem.ru/
e.g
687474703a2f2f*2e*2e7275 <<<
http://{WILDCARD_ANY_STRING}.{WILDCARD_ANY_STRING}.ru
However, it returns malformed database.
please could you assist.
many thanks
Tom
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml
