On Wed, 22 Dec 2004 12:08:08 +0100 Boguslaw <[EMAIL PROTECTED]> wrote:
Hello,
I have something like this is my debug log:
[3056] LibClamAV Warning: in cli_scanhtml()
[3056] LibClamAV Warning: Calculated MD5 checksum: beb3a0cb22a7d2018005f7ca37ac48f8
[3056] LibClamAV Warning: Calculated MD5 checksum: beb3a0cb22a7d2018005f7ca37ac48f8
[3056] LibClamAV Warning: Calculated MD5 checksum: d41d8cd98f00b204e9800998ecf8427e
[3056] LibClamAV Warning: Type: 517, expected: 516
(Exploit.URLSpoof.gen)[3056] LibClamAV Warning: Type: 517, expected:
516 (Exploit.URLSpoof.gen)[3056] LibClamAV Warning: Calculated MD5
checksum: 9680f4a11da1fe560a91714f70b51b97
[3056] LibClamAV Warning: Recognized Raw mail file
[3056] LibClamAV Warning: Starting cli_scanmail(), mrec == 2, arec ==
0[3056] LibClamAV Warning: in mbox()
[3056] LibClamAV Warning: Recognized Raw mail file
[3056] LibClamAV Warning: parseEmailHeaders
[3056] LibClamAV Warning: End of header information
[3056] LibClamAV Warning: parseEmailHeaders: return
[3056] LibClamAV Warning: cli_mbox returning 0
[3056] LibClamAV Warning: Calculated MD5 checksum: cccb37c0a7314ba18b2aeb657feca3c5
[3056] LibClamAV Warning: Type: 517, expected: 516
(Exploit.URLSpoof.gen)[3056] LibClamAV Warning: Type: 517, expected:
516 (Exploit.URLSpoof.gen)[3056] LibClamAV Warning: Calculated MD5
checksum: 83861e8d6d149d292691cda97ff30a1a
Does it mean that it is another PayPal phishing not recognized by my ClamAV version 0.80 ?
The above WAS NOT generated by the software distributed by the ClamAV team. This is clamav-users mailing list and not "something-based-on-clamav-but-not-clamav ml".
It is strictly from Windows native port version of libclamav used in "something-based-on-clamav-but-not-clamav ml". I misreported that as being from original ClamAV.
I apologise.
Anyway this was indeed new Paypal phishing.
Merry Christmas Boguslaw Brandys
_______________________________________________ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
