Re: [clamav-users] how to find Html.Phishing.Auction-214

2017-03-22 Thread Hajo Locke
Hallo, Am 22.03.2017 um 15:12 schrieb Kees Theunissen: On Wed, 22 Mar 2017, Hajo Locke wrote: thank you steve. i could find the lines and removed them. How could you decode this signature? ~$ sigtool --find-sigs Html.Phishing.Auction-214 | sigtool --decode-sigs VIRUS NAME:

Re: [clamav-users] how to find Html.Phishing.Auction-214

2017-03-22 Thread Kees Theunissen
On Wed, 22 Mar 2017, Hajo Locke wrote: > thank you steve. i could find the lines and removed them. How could you decode > this signature? ~$ sigtool --find-sigs Html.Phishing.Auction-214 | sigtool --decode-sigs VIRUS NAME: Html.Phishing.Auction-214 TARGET TYPE: HTML OFFSET: * DECODED SIGNATURE:

Re: [clamav-users] how to find Html.Phishing.Auction-214

2017-03-22 Thread Hajo Locke
Hello, Am 22.03.2017 um 14:01 schrieb Steve Basford: On Wed, March 22, 2017 12:52 pm, Hajo Locke wrote: Hello, have an issue here with this signature. Html.Phishing.Auction-214 is found VIRUS NAME: Html.Phishing.Auction-214 Here you go... TARGET TYPE: HTML OFFSET: * DECODED SIGNATURE:

Re: [clamav-users] how to find Html.Phishing.Auction-214

2017-03-22 Thread Steve Basford
On Wed, March 22, 2017 12:52 pm, Hajo Locke wrote: > Hello, > > > have an issue here with this signature. Html.Phishing.Auction-214 is found VIRUS NAME: Html.Phishing.Auction-214 Here you go... TARGET TYPE: HTML OFFSET: * DECODED SIGNATURE: sein, weil sie ei[][][]nen fehler gemacht haben, als

[clamav-users] how to find Html.Phishing.Auction-214

2017-03-22 Thread Hajo Locke
Hello, have an issue here with this signature. Html.Phishing.Auction-214 is found within an small sql-file. i try to find corresponding text to remove it, but iam not successful. If i split my sqlfile in parts with 1000 lines and scan that parts, so every part is clean, virus is only detected