Re: [Clamav-users] What is infected attachment (Email.Phishing.RB-827)?

From: Steve Basford <steveb_clamav(at)sanesecurity.com>
Date: Thu Jun 28 2007 - 06:46:15 EDT

>
> 554 Failure Messagecontains an infected attachment (Email.Phishing.RB-827)
>
> The laptop that is sending the message is not infected with any virus.

RB-827 is a phishing signature for regions bank, I won't post the full url for the signature but here's a part of it:

/ibsregions/cmserver/

So, any urls/text like that in the outgoing email?

Cheers,

Steve

---

Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html Received on Thu Jun 28 06:47:05 2007