Joel & Alain, Finally had some time to check and now see that I am also observing this in 22 messages, most, if not all of which are the same ones identified in the first case. I suspect that these detections were not previously made because they were masked by Email.Phishing.VOF1-6295284-0 which identified 47 messages.
I uploaded one of several mailings from my water district: d81b0950ab1f524ef325b78beee34166:71221:9676.emlx -Al- On Apr 23, 2017, at 11:42 AM, Joel Esler (jesler) <jes...@cisco.com> wrote: > Are they FPs? Or just alerts? > > -- > Sent from my iPhone > >> On Apr 23, 2017, at 14:17, "ad...@web-envy.com" <ad...@web-envy.com> wrote: >> >> I can confirm that today I did not get any of these FPs, however I am >> getting a bunch of these instead. A lot of them are on older email messages >> that look like normal messages: >> >> >> >> Email.Phishing.VOF1-6295446-0 >> >> >> >> >> >> _______________________________________________ >> clamav-users mailing list >> clamav-users@lists.clamav.net >> http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users >> >> >> Help us build a comprehensive ClamAV guide: >> https://github.com/vrtadmin/clamav-faq >> >> http://www.clamav.net/contact.html#ml > _______________________________________________ > clamav-users mailing list > clamav-users@lists.clamav.net > http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users > > > Help us build a comprehensive ClamAV guide: > https://github.com/vrtadmin/clamav-faq > > http://www.clamav.net/contact.html#ml -Al- -- Al Varnell Mountain View, CA _______________________________________________ clamav-users mailing list clamav-users@lists.clamav.net http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml