[sanesecurity] Re: Sanesecurity.Junk.11781.UNOFFICIAL
- From: John Horne <john.horne@xxxxxxxxxxxxxx>
- To: sanesecurity@xxxxxxxxxxxxx
- Date: Tue, 23 Feb 2010 22:19:39 +0000
On Tue, 2010-02-23 at 17:05 -0500, micah wrote:
> I got a report from a user that their email was blocked based on
> Sanesecurity.Junk.11781.UNOFFICIAL. I ran that through
> clamav-unofficial-sigs.sh -d and it says:
>
> Sanesecurity.Junk.11781 found in:
> junk.ndb sanesecurity-junk.ndb
> Sanesecurity.Junk.11781 signature decodes to:
>
> <redacted domain so my message will get to the list>
>
For that signature I get it decoded as:
THE UNITED NATIONS ORGANIZATION HAS FROM THIS DAY TAKEN OVER THE
RELEASE OF APPROVED YET TO PAY CONTR
I have shortened the decoded sig so that it passes through to the list,
but as you can see it is nothing like what you have. Are your signatures
up to date?
John.
--
John Horne, University of Plymouth, UK
Tel: +44 (0)1752 587287 Fax: +44 (0)1752 587001
Other related posts:
