23 lines
621 B
Plaintext
23 lines
621 B
Plaintext
# ----------
|
|
# Get signature info (decode signatur)
|
|
# ----------
|
|
|
|
# - See also: https://lists.gt.net/clamav/users/73547
|
|
|
|
# - If yoe see something like
|
|
# -
|
|
# - May 15 15:49:56 mx amavis[19815]: (19815-17) Blocked INFECTED (MBL_27966083.UNOFFICIAL)
|
|
# -
|
|
# - you can get some infos about the blockin signatur (MBL_27966083.UNOFFICIAL)
|
|
# - using clamav's 'sigtool' (ommit '.UNOFFICIAL' if present:
|
|
# -
|
|
sigtool --find-sigs MBL_27966083 | sigtool --decode-sigs
|
|
sigtool --find-sigs=MBL_27966083 | sigtool --decode-sigs
|
|
|
|
# - Output of that command is:
|
|
# -
|
|
VIRUS NAME: MBL_27966083
|
|
DECODED SIGNATURE:
|
|
https://docs.google.com
|
|
|