On 13 Apr 2016 at 11:20, Alex wrote: > Hi, > > I don't understand why themastersbaker.com would be tagged? > > # sigtool --find-sigs winnow.spam.ts.untyped.966134 | sigtool --decode-sigs > VIRUS NAME: winnow.spam.ts.untyped.966134
Winnow signatures are distributed by Sanesecurity.com. They have their own mailing list although Steve does pop-up here as well. paul _______________________________________________ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml