*** This bug is a duplicate of bug 294076 ***
https://bugs.launchpad.net/bugs/294076
** This bug has been marked a duplicate of bug 294076
KDE3 apps, OO.o and Wine loose screen text when run with desktop effects
--
blank menus on qt3-designer
https://bugs.launchpad.net/bugs/326683
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
From [email protected] Sun Feb 08 07:55:15 2009
Return-path: <[email protected]>
Envelope-to: [email protected]
Delivery-date: Sun, 08 Feb 2009 07:55:15 -0800
Received: from exprod5mx232.postini.com ([64.18.0.118] helo=psmtp.com)
by mail-archive.com with smtp (Exim 4.67)
(envelope-from <[email protected]>)
id 1LWBzy-0005PL-Qe
for [email protected]; Sun, 08 Feb 2009 07:55:11 -0800
Received: from source ([194.109.142.194]) by exprod5mx232.postini.com
([64.18.4.10]) with SMTP;
Sun, 08 Feb 2009 07:55:11 PST
X-Virus-Scanned: Debian amavisd-new at tad.clamav.net
Received: from tad.clamav.net ([127.0.0.1])
by localhost (tad.clamav.net [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id J4V6JBfIF98Y; Sun, 8 Feb 2009 16:54:52 +0100 (CET)
Received: from tad.clamav.net (localhost.localdomain [127.0.0.1])
by tad.clamav.net (Postfix) with ESMTP id 8AE9716C7D2;
Sun, 8 Feb 2009 16:54:47 +0100 (CET)
X-Original-To: [email protected]
Delivered-To: [email protected]
X-Virus-Scanned: Debian amavisd-new at tad.clamav.net
Received: from tad.clamav.net ([127.0.0.1])
by localhost (tad.clamav.net [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id XwH8rKVMaBvn for <[email protected]>;
Sun, 8 Feb 2009 16:54:43 +0100 (CET)
Received: from saturn.dataflame.net (saturn.dataflame.net [91.103.216.238])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by tad.clamav.net (Postfix) with ESMTP id DCFDB16C0B6
for <[email protected]>;
Sun, 8 Feb 2009 16:54:43 +0100 (CET)
Received: from 87-194-137-90.bethere.co.uk ([87.194.137.90]
helo=[192.168.1.42])
by saturn.dataflame.net with esmtpsa (TLSv1:AES256-SHA:256)
(Exim 4.69) (envelope-from <[email protected]>)
id 1LWByK-0005pA-Hh
for [email protected]; Sun, 08 Feb 2009 15:53:28 +0000
Message-ID: <[email protected]>
Date: Sun, 08 Feb 2009 15:54:34 +0000
From: Steve Basford <[email protected]>
User-Agent: Thunderbird 2.0.0.19 (Windows/20081209)
MIME-Version: 1.0
To: ClamAV users ML <[email protected]>
References: <[email protected]>
<[email protected]>
In-Reply-To: <[email protected]>
X-AntiAbuse: This header was added to track abuse,
please include it with any abuse report
X-AntiAbuse: Primary Hostname - saturn.dataflame.net
X-AntiAbuse: Original Domain - lists.clamav.net
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - sanesecurity.com
Subject: Re: [Clamav-users] Fwd: clamav detects phishing in my database dump
X-BeenThere: [email protected]
X-Mailman-Version: 2.1.9
Precedence: list
Reply-To: ClamAV users ML <[email protected]>
List-Id: ClamAV users ML <clamav-users.lists.clamav.net>
List-Unsubscribe:
<http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users>,
<mailto:[email protected]?subject=unsubscribe>
List-Post: <mailto:[email protected]>
List-Help: <mailto:[email protected]?subject=help>
List-Subscribe: <http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users>,
<mailto:[email protected]?subject=subscribe>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Sender: [email protected]
Errors-To: [email protected]
X-pstn-neptune: 2/1/0.50/67
X-pstn-levels: (S:73.11186/99.90000 CV:99.9000 FC:95.5390 LC:95.5390
R:95.9108 P:95.9108 M:97.0282 C:98.6951 )
X-pstn-settings: 4 (1.5000:1.5000) s cv gt3 gt2 gt1 r p m c
X-pstn-addresses: from <[email protected]> [294/10]
Mister Johnson wrote:
> Hello List.
>
> Can anyone tell me what I can do about this. Is there any chance my
> false positive virus example is take care of from clamAV's side, or do
> I have to find an other way around? (e.g. not using ClamAV?)
>
> Unfortunately I never got an answer to my virus submission and it's
> been a while since the submission.
>
Hi,
That signature decodes to:
==================
qra arhra vgna iresnuera orahgmra
*
avpug vaareunyo rvarf gntrf nhguragvsvmvreg jreqra, jreqra trfcr
==================
(go to rot13.com to decode the above)
If you're sure it's an FP then... create a file called local.ign in your
clamav db directory and copy
in the following line:
main.ndb:19929:HTML.Phishing.SPK-3
ClamAV will then ignore the signature.
Hope that helps,
Steve
Sanesecurity
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml
