On 26 Feb 2006, at 5:11 PM, Ronda Brown wrote:


On 26/02/2006, at 5:00 PM, James Devenish wrote:

Hi Ronni,

Hopefully someone else can give you a ClamXav-specific answer. I'd say
that you've visited a website that hosts this Trojan and that your
computer has downloaded it. Perhaps it arrived as part of an e-mail or
a website that you visited. I guess it got downloaded because the
website uses the Trojan as part of the web page, or because you
clicked on a link. Examination of the cache files will reveal the
source address. However, it's unlikely that you're "infected" as such
(or, at least, no more than your family is "infected with ice" simply
because there's ice sitting in your freezer at home).

HTML.Phishing.Bank-246

Thanks James,

You say "Examination of the cache files will reveal the source address".
I did  'Command i' , but that didn't give me much information.
And, of course I have 'Secure Emptied the Trash' with these files in it.

Cheers,
Ronni

HI Ronni,

There have been a number of scam    " Bank "    emails recently !

ANZ
Sunwaymetcorp
Combank

asking for you to login and confirm your details .
Banks do NOT ask for you to confirm details .
These are scam emails with " phishing"  addresses.

If you do login the scammers record your login and password before they pass you on to the real bank .
No more bank funds left afterwards.

It seems ClamXAV recognises the hidden address that takes you away from the expected address .

I had some and tracked them down and eliminated them individually from my Trash box .

Have fun

Bob