Ooops... forgot the sigtool un-pack bit (note: daily file only) sigtool --unpack-current=daily grep "PUA.HTML.Infected.WebPage" daily.* -h > sig.tmp sigtool --decode-sigs < sig.tmp > decodedsig.tmp cat decodedsig.tmp
Cheers, Steve Sanesecurity _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
