[sanesecurity] Re: decode .ldb?

  • From: "McDonald, Dan" <Dan.McDonald@xxxxxxxxxxxxxxxx>
  • To: <sanesecurity@xxxxxxxxxxxxx>
  • Date: Tue, 16 Jun 2009 14:22:00 -0500

On Tue, 2009-06-16 at 19:55 +0100, Steve Basford wrote:
> 
> McDonald, Dan wrote:
> > The clamav-unofficial-sigs.sh script has a nifty decoding tool for .ndb
> > signatures.  Can someone give me a procedure for decoding .ldb
> > signatures?  I've been seeing a lot of
> > Sanesecurity.Spam.ldb.21.UNOFFICIAL and would like to know what it is:
> >   
> http://pastebin.ws/f31y4z

Beautiful!

I wondered why I was getting slammed with those at home and no
complaints at work.  Now I know where to start digging at home.

-- 
Daniel J McDonald, CCIE # 2495, CISSP # 78281, CNX
www.austinenergy.com

Other related posts: