Re: [Clamav-users] Missed detection

2010-03-18 Thread Steve Basford
> Any ideas? I have a couple more like this in my DB. Hi Tom, Drop me the sample (usual email address) and I'll test things this end. Cheers, Steve Sanesecurity ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www

[Clamav-users] Missed detection

2010-03-18 Thread Tom Shaw
I have a md5 based signature, winnow.malware.2015, that I created from a file ./malware/style25.dat-4mmrTv The signature is: 23848f3f080237b7e2d2313496f4c00f:3680:winnow.malware.2015 I can see its in my clam sigs by: $ sigtool --list-sigs=/usr/local/share/clamav/winnow_malware.hdb | grep "wi