I don’t think you are in the right place as I can’t find that signature (or any remotely resembling it) in the ClamAV official database. I suspect you are using some 3rd party UNOFFICIAL signatures that are detecting that one.
-Al- On Wed, Apr 13, 2016 at 08:20 AM, Alex wrote: > > Hi, > > I don't understand why themastersbaker.com would be tagged? > > # sigtool --find-sigs winnow.spam.ts.untyped.966134 | sigtool --decode-sigs > VIRUS NAME: winnow.spam.ts.untyped.966134 > TARGET TYPE: MAIL > OFFSET: * > DECODED SIGNATURE: > http://themastersbaker.com/ > > > This isn't currently on any other blacklist. Is this the proper > address to request a winnow removal? > > I've already whitelisted it. > Thanks, > Alex
smime.p7s
Description: S/MIME cryptographic signature
_______________________________________________ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml