On Sat, 11 Dec 2010, T??r??k Edwin wrote:
Mal/Phish-A looks like a generic/heuristic detection. These kinds of
detections will be different from AV to AV, so constructing a list of
aliases is not trivial (one AV may detect it via heuristics, another
one via multiple signatures with a more specific name, etc.).
Easiest would be if you could ask the admin of the site running Sophos
to log at least the 'From:' and 'Subject:' fields, then look those up
in your logs, and keep a copy of those next time.
Thank you very much for the information. We'll try your suggestion to
hopefully get a copy of those messages next time.
Regards,
Tan Bui
Montreal, Quebec, Canada
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml
