Remou
Joined: 15 Feb 2010 |
Posts: 0 |
|
|
 |
Posted: Mon Feb 15, 2010 7:53 pm |
|
 |
 |
 |
 |
Hi
ClamWin has reported 4 incidences of Email.Phishing.Anglo, but I cannot find any further information.
C:\Users\<user>\AppData\Local\Microsoft\Windows Live Mail\<account>\Trash\6F6366EC-00000078.eml: Email.Phishing.Anglo FOUND
C:\Users\<user>\AppData\Local\Microsoft\Windows Mail\<account>\Trash\46BD2024-00000078.eml: Email.Phishing.Anglo FOUND
I receive mail from this location in more than one place, so it is not unlikely that all four incidences refer to the same email.
It would be great to know what the problem is, and whether I have any reason to be concerned.
Thanks
|
|
GuitarBob
Joined: 09 Jul 2006 |
Posts: 9 |
Location: USA |
|
 |
Posted: Tue Feb 16, 2010 3:43 am |
|
 |
 |
 |
 |
I can't help you find the email, but the phishing email detections usually have a link that leads to a web site that has been set up to steal information from individuals about their bank account account, credit card, or other sign-on information. Frequently the web site has already been identified as a "bad" site. Sometimes the email will have a place for the recipient to fill out this information and send a reply. If no one clicks on the link or sends a reply, no harm has been done.
Regards,
|
|
Remou
Joined: 15 Feb 2010 |
Posts: 0 |
|
|
 |
Posted: Tue Feb 16, 2010 11:18 am |
|
 |
 |
 |
 |
I clearly phrased that badly. I know where the email is, I posted the path, I even know what phishing is, what I cannot find in the ClamWin site or forums is the specific entry Email.Phishing.Anglo, if all it is is a phishing email, it is not important, but ClamWin refers to the entry as a virus, which is of more concern.
|
|
GuitarBob
Joined: 09 Jul 2006 |
Posts: 9 |
Location: USA |
|
 |
Posted: Tue Feb 16, 2010 2:57 pm |
|
 |
 |
 |
 |
All detections are treated the same by Clam/ClamWin, whether or not they are viruses, phishing, or PUA. You have to turn on phishing and PUA detection, however. Phishing detection is turned on for Clamwin by inserting --enable-phishing in the command line under the Advanced tab, so you can just leave it off if you do not want it.
That Email.Phishing.Anglo signature was prepared in July, 2008, and it triggers on an email that purports to have a security message. You don't normally get something like that for real.
Regards,
|
|