From: Tomasz Papszun (tomek-suse-seclodz.tpsa.pl)
Date: Sat Sep 24 2005 - 15:59:39 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

On Sat, 24 Sep 2005 at 21:40:07 +0200, Carlos E. R. wrote:
>
> I got some emails that I forwarded to somebody else, and his mail server
> antivirus said they contained html viruses:
>
> HTML.Phishing.GB-gen
> HTML.Phishing.DB-1

These are names of signatures by ClamAV.

[...]
> Also, it should detect the virus in the files where I saved them, but it
> doesn't.
>
> Now, I'm not worried about those viruses damaging my system (I use Pine as
> MUA), but about the amavis+antivir setup not warning me about them when I
> try to forward them as emails (I have a friend that is interested in those
> emails).

Nowadays it's almost impossible to have detection of all
malware/phishing, and surely entirely impossible to have it immediately.
There are too many of them.

> Now, my question:
>
> To whom do I email a sample of those viruses [...]

They are not real viruses. Just phishing messages. No need to worry to
much.

--
 Tomasz Papszun SysAdm TP S.A. Lodz, Poland | And it's only
 tomek at lodz.tpsa.pl http://www.lodz.tpsa.pl/iso/ | ones and zeros.
 tomek at clamav.net http://www.ClamAV.net/ A GPL virus scanner

--
Check the headers for your unsubscription address
For additional commands, e-mail: suse-security-helpsuse.com
Security-related bug reports go to securitysuse.de, not here

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]