[clamav-users] winnow FP

[Paul Whelan]

On 13 Apr 2016 at 11:20, Alex wrote:

> Hi,
> 
> I don't understand why themastersbaker.com would be tagged?
> 
> # sigtool --find-sigs winnow.spam.ts.untyped.966134 | sigtool --decode-sigs
> VIRUS NAME: winnow.spam.ts.untyped.966134

Winnow signatures are distributed by Sanesecurity.com.  They have their own mailing list 
although Steve does pop-up here as well.

paul