I don’t think you are in the right place as I can’t find that signature (or any 
remotely resembling it) in the ClamAV official database.  I suspect you are 
using some 3rd party UNOFFICIAL signatures that are detecting that one.

-Al-

On Wed, Apr 13, 2016 at 08:20 AM, Alex wrote:
> 
> Hi,
> 
> I don't understand why themastersbaker.com would be tagged?
> 
> # sigtool --find-sigs winnow.spam.ts.untyped.966134 | sigtool --decode-sigs
> VIRUS NAME: winnow.spam.ts.untyped.966134
> TARGET TYPE: MAIL
> OFFSET: *
> DECODED SIGNATURE:
> http://themastersbaker.com/
> 
> 
> This isn't currently on any other blacklist. Is this the proper
> address to request a winnow removal?
> 
> I've already whitelisted it.
> Thanks,
> Alex

Attachment: smime.p7s
Description: S/MIME cryptographic signature

_______________________________________________
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Reply via email to