I've got it here in a plaintext Email (generated on a webserver) with a link and some lines of text in it.
He tried to forward me the error: 05/21/2007 15:24:58.325 xxx.smd Virus scanner 1 reports exit code of 1 05/21/2007 15:24:58.325 xxx.smd Scanner 1: Virus= Email.Phishing.RB-882 Attachment= [48] I 05/21/2007 15:24:58.325 xxx.smd Scanned: CONTAINS A VIRUS [MIME: 1 2000] 05/21/2007 15:24:58.325 xxx.smd From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] [incoming from 12.12.12.12] 05/21/2007 15:24:58.325 xxx.smd Subject: WG: Undeliverable Mail and it was caught as RB-882 Attachement. I was surprised today, how many servers are using Clam and the phising signatures :) Alex > -----Ursprüngliche Nachricht----- > Von: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Im Auftrag von > Todd Richards > Gesendet: Montag, 21. Mai 2007 17:12 > An: [email protected] > Betreff: RE: [Declude.Virus] Virus? > > I'm seeing it from other email servers though - not mine. So I don't > see > how Clam is the culprit, unless the bounces I'm getting are from > servers > also running Clam? Below are two messages I receive. > > Todd > > > *** #1 *** > undeliverable to [EMAIL PROTECTED] > > Body of message generated response: > 554 A virus was found in this message! Rejecting message. (#5.3.0) > > > *** #2 *** > SMTP connection faile > undeliverable to [EMAIL PROTECTED] > > Body of message generated response: > 554 Your email was rejected because it contains the Email.Phishing.RB- > 882 > virus > > > > > > > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of > Hirthe, > Alexander > Sent: Monday, May 21, 2007 9:48 AM > To: [email protected] > Subject: AW: [Declude.Virus] Virus? > > Same here, I disabled ClamAV and it seems to get better. > > > > --- > This E-mail came from the Declude.Virus mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus". The archives can be found > at http://www.mail-archive.com. > > ---------------------------------------------------------------------- Siller AG, Wannenaeckerstrasse 43, 74078 Heilbronn Vorstand: Prof. H.-F. Siller (Vorsitzender), Joern Buelow, Ralf Michi Aufsichtsratsvorsitzender: Armin Sohler Reg. Gericht Stuttgart, HRB 107707, Ust-Id Nr. DE145782955 ---------------------------------------------------------------------- --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.
