Re: [Clamav-users] Question about Phish heuristic

On 4/30/2009 12:28 AM, Török Edwin wrote: > That submission id is another sample you submitted on April 17th that > matches Email.Phishing.DblDom-59, > and it doesn't have anything about sears or harrahs-marketing inside it. > Thanks for the response. Oh, OK. I can't tell from the mailing l

Re: [Clamav-users] Question about Phish heuristic

At 4:03 PM -0700 4/29/09, MrC wrote: >I submitted what I considered to be a FP on > >Phishing.Heuristics.Email.SpoofedDomain > >Submission-ID: 7705854 >Sender: Me >Submission notes: not a false positive >Added: No > >which was not considered a FP. The code below is what trigger

Re: [Clamav-users] Question about Phish heuristic

Török Edwin wrote: > On 2009-04-30 02:03, MrC wrote: >> I submitted what I considered to be a FP on >> >>Phishing.Heuristics.Email.SpoofedDomain >> >>Submission-ID: 7705854 >> > > That submission id is another sample you submitted on April 17th that > matches Email.Phishing.DblDom-59,

Re: [Clamav-users] Question about Phish heuristic

On 2009-04-30 02:03, MrC wrote: > I submitted what I considered to be a FP on > >Phishing.Heuristics.Email.SpoofedDomain > >Submission-ID: 7705854 > That submission id is another sample you submitted on April 17th that matches Email.Phishing.DblDom-59, and it doesn't have anything abou

[Clamav-users] Question about Phish heuristic

I submitted what I considered to be a FP on Phishing.Heuristics.Email.SpoofedDomain Submission-ID: 7705854 Sender: Me Submission notes: not a false positive Added: No which was not considered a FP. The code below is what triggered the detection (I hope this passes the list and s