> clamav@debian-vm-07:~/clamav-devel$ sigtool --find-sigs=Worm.Bagle.H-zip > [main.db] Worm.Bagle.H-zippwd-1 > > What makes this one a special case is the extra " (Clam)" at the end of > the signature name. This is an old sig.
Hi Dave, Thanks for the detailed write-up, the issue was a bit confusing ;) Cheers, Steve Sanesecurity _______________________________________________ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/support/ml