[clamav-users] how to find Html.Phishing.Auction-214

Hajo Locke Hajo.Locke at gmx.de
Wed Mar 22 12:52:57 UTC 2017


Hello,

have an issue here with this signature.
Html.Phishing.Auction-214 is found within an small sql-file. i try to 
find corresponding text to remove it, but iam not successful.
If i split my sqlfile in parts with 1000 lines and scan that parts, so 
every part is clean, virus is only detected in complete sql-file.
which text is covered by this signature? which text i should looking for?
i tried to decode but unfortunately sigtool --decode-sigs is not able to 
show contents of daily.cld or main.cvd

Thanks,
Hajo



More information about the clamav-users mailing list