On Sep 27, 2016, at 2:26 AM, David Shrimpton <d.shrimp...@its.uq.edu.au> wrote: > Is the original malware sample for which the signature was intended still > available > and does it have the above sha256sum ?
Apparently available from the VT link Steve gave with the following file names: 013167adc0b9fbc908390023f9c078009599ec95.IN_ 044.PART.MET SAVESLOT2 SAVESLOT3 001.PART.MET 044.PART.MET.BAK And yes, the same SHA256 as you listed. -Al- _______________________________________________ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml
