Re: [clamav-users] SpoofedDomain FOUND

2017-02-17 Thread Al Varnell
It's possible for ClamAV to fix that by providing an update record which would whitelist that particular match for PayPal. Normally you would just have to upload the message to ClamAV's False Positive page with an explanation, but in this case, since it's embedded in that Thunderbird mailbox.

Re: [clamav-users] SpoofedDomain FOUND

2017-02-16 Thread Reindl Harald
Am 16.02.2017 um 14:34 schrieb ellanios82: On 02/16/17 15:09, Mark Allan wrote: How is it more helpful? Because I gave the answer*and* explained what it did - tremendous : no - it was a answer for a specific shell in a more ore less recent version - that feature was added some years

Re: [clamav-users] SpoofedDomain FOUND

2017-02-16 Thread ellanios82
On 02/16/17 15:09, Mark Allan wrote: How is it more helpful? Because I gave the answer*and* explained what it did - tremendous : after all , Linux invites ordinary Home Users : NOT just people who know Unix [ i do not : i have zero computer education] . cheers

Re: [clamav-users] SpoofedDomain FOUND

2017-02-16 Thread Reindl Harald
Am 16.02.2017 um 14:27 schrieb ellanios82: On 02/16/17 15:00, Mark Allan wrote: simply to add 2>&1 to the end of your command, to redirect stderr to stdout. clamscan --debug/home/user/.thunderbird/9i9wirek.default/Mail/pop.gmail.com/bus >> clamdeb.txt 2>&1 -

Re: [clamav-users] SpoofedDomain FOUND

2017-02-16 Thread ellanios82
On 02/16/17 15:00, Mark Allan wrote: simply to add 2>&1 to the end of your command, to redirect stderr to stdout. clamscan --debug/home/user/.thunderbird/9i9wirek.default/Mail/pop.gmail.com/bus >> clamdeb.txt 2>&1 - again thank you for being Really helpful { not

Re: [clamav-users] SpoofedDomain FOUND

2017-02-16 Thread ellanios82
On 02/16/17 15:00, Mark Allan wrote: A more helpful answer (which is quicker to type than digging out URLs) is simply to add 2>&1 to the end of your command, to redirect stderr to stdout. - thank you so much { often clever people use lists as platform to show how clever they are} .

Re: [clamav-users] SpoofedDomain FOUND

2017-02-16 Thread Mark Allan
> On 16 Feb 2017, at 1:12 pm, Reindl Harald wrote: > Am 16.02.2017 um 14:09 schrieb Mark Allan: >>> On 16 Feb 2017, at 1:03 pm, Reindl Harald wrote: >>> Am 16.02.2017 um 14:00 schrieb Mark Allan: > On 16 Feb 2017, at 12:48 pm, Reindl

Re: [clamav-users] SpoofedDomain FOUND

2017-02-16 Thread Steve Basford
On Thu, February 16, 2017 1:03 pm, Reindl Harald wrote: > give a man a fish and you feed him for a day; teach a man to fish and you > feed him for a lifetime ___ Are you are that's correct... wasn't it... Give a man a fish , he eats for a day. Teach

Re: [clamav-users] SpoofedDomain FOUND

2017-02-16 Thread Reindl Harald
Am 16.02.2017 um 14:09 schrieb Mark Allan: On 16 Feb 2017, at 1:03 pm, Reindl Harald wrote: Am 16.02.2017 um 14:00 schrieb Mark Allan: On 16 Feb 2017, at 12:48 pm, Reindl Harald wrote: Am 16.02.2017 um 13:39 schrieb ellanios82: - What

Re: [clamav-users] SpoofedDomain FOUND

2017-02-16 Thread Mark Allan
> On 16 Feb 2017, at 1:03 pm, Reindl Harald wrote: > Am 16.02.2017 um 14:00 schrieb Mark Allan: >> >>> On 16 Feb 2017, at 12:48 pm, Reindl Harald wrote: >>> >>> Am 16.02.2017 um 13:39 schrieb ellanios82: - What please is correct

Re: [clamav-users] SpoofedDomain FOUND

2017-02-16 Thread Reindl Harald
Am 16.02.2017 um 14:00 schrieb Mark Allan: On 16 Feb 2017, at 12:48 pm, Reindl Harald wrote: Am 16.02.2017 um 13:39 schrieb ellanios82: On 02/16/17 02:59, Al Varnell wrote: I'm afraid it's going to be more trouble than it's worth. You will need to turn debugging

Re: [clamav-users] SpoofedDomain FOUND

2017-02-16 Thread Mark Allan
> On 16 Feb 2017, at 12:48 pm, Reindl Harald wrote: > > Am 16.02.2017 um 13:39 schrieb ellanios82: >> On 02/16/17 02:59, Al Varnell wrote: >>> I'm afraid it's going to be more trouble than it's worth. You will >>> need to turn debugging on when you scan that mailbox

Re: [clamav-users] SpoofedDomain FOUND

2017-02-16 Thread Reindl Harald
Am 16.02.2017 um 13:39 schrieb ellanios82: On 02/16/17 02:59, Al Varnell wrote: I'm afraid it's going to be more trouble than it's worth. You will need to turn debugging on when you scan that mailbox which will produce a huge amount of output, but includes details about exactly what was

Re: [clamav-users] SpoofedDomain FOUND

2017-02-16 Thread ellanios82
On 02/16/17 02:59, Al Varnell wrote: I'm afraid it's going to be more trouble than it's worth. You will need to turn debugging on when you scan that mailbox which will produce a huge amount of output, but includes details about exactly what was found. You would then need to search that

Re: [clamav-users] SpoofedDomain FOUND

2017-02-16 Thread ellanios82
On 02/16/17 02:59, Al Varnell wrote: Ellan, I'm afraid it's going to be more trouble than it's worth. You will need to turn debugging on when you scan that mailbox which will produce a huge amount of output, but includes details about exactly what was found. You would then need to search

Re: [clamav-users] SpoofedDomain FOUND

2017-02-15 Thread Al Varnell
Ellan, I'm afraid it's going to be more trouble than it's worth. You will need to turn debugging on when you scan that mailbox which will produce a huge amount of output, but includes details about exactly what was found. You would then need to search that mailbox in Thunderbird for the

Re: [clamav-users] SpoofedDomain FOUND

2017-02-15 Thread Reindl Harald
Am 15.02.2017 um 22:26 schrieb ellanios82: How please can i identify which is the Offending message : am getting : /home/user/.thunderbird/9i9wirek.default/Mail/pop.gmail.com/bus: Heuristics.Phishing.Email.SpoofedDomain FOUND you can't because thunderbird is using

Re: [clamav-users] SpoofedDomain FOUND

2017-02-15 Thread ellanios82
On 02/15/17 22:48, Kees Theunissen wrote: On Wed, 15 Feb 2017, ellanios82 wrote: Hello List , scanning my Thunderbird directory , am getting : /home/user/.thunderbird/9i9wirek.default/Mail/pop.gmail.com/bus: Heuristics.Phishing.Email.SpoofedDomain FOUND

Re: [clamav-users] SpoofedDomain FOUND

2017-02-15 Thread Kees Theunissen
On Wed, 15 Feb 2017, ellanios82 wrote: > Hello List , > > > scanning my Thunderbird directory , am getting : > > /home/user/.thunderbird/9i9wirek.default/Mail/pop.gmail.com/bus: > Heuristics.Phishing.Email.SpoofedDomain FOUND > /home/user/.thunderbird/9i9wirek.default/Mail/pop.gmail.com/bus:

[clamav-users] SpoofedDomain FOUND

2017-02-15 Thread ellanios82
Hello List , scanning my Thunderbird directory , am getting : /home/user/.thunderbird/9i9wirek.default/Mail/pop.gmail.com/bus: Heuristics.Phishing.Email.SpoofedDomain FOUND /home/user/.thunderbird/9i9wirek.default/Mail/pop.gmail.com/bus: copied to '/var/log/clams.infected/bus' How please