On 12/12/2012 15:10, Benny Pedersen wrote:
might be to much wildcard
try make signature match *.pisem.ru and hope it solves it
_______________________________________________
Thanks for the response.
The hostname.domainname part is randomized, so it would need to be a
wildcard.
1 constant is that the domain part (in this case pisem) always seems to
be 5 letters.
the .tld also changes between .ru & .su
thanks
Tom
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml
