-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The Saturday 2005-09-24 at 22:59 +0200, Tomasz Papszun wrote: Weird. You are using Mutt, but your email broke the thread. Something funny going on :-?
I got some emails that I forwarded to somebody else, and his mail server antivirus said they contained html viruses:
HTML.Phishing.GB-gen HTML.Phishing.DB-1
These are names of signatures by ClamAV.
Ah, Clamav. Interesting :-)
Nowadays it's almost impossible to have detection of all malware/phishing, and surely entirely impossible to have it immediately. There are too many of them.
I know. I just wanted to report them, and I can't.
Now, my question:
To whom do I email a sample of those viruses [...]
They are not real viruses. Just phishing messages. No need to worry to much.
But they are detected as viruses, and bounced: | VIRUS ALERT | | Our content checker found | virus: HTML.Phishing.GB-gen | in your email to the following recipient: | -> phishing@....org | | Please check your system for viruses, | or ask your system administrator to do so. | | Delivery of the email was stopped! I know they are phising attempts, but they are also viruses. The one above contains javascript code. The idea is that an organization here is keen in being sent phising attempts, so they can investigate the emails; they forward the bad ones to the authorities and the banks involved, closing the faked web sites as soon as possible. I know they get results, some of those web pages have been closed already. The snag is that some of those phisings attempts, those in german, are bounced by the virus scaner of their mail service, and I have to remail inside a zip file with password. If my antivirus detected them, it would save some time. That's why I wanted to report them to H+BEDV, but the email I had bounced (no such user, I think), and I couldn't find an address at their web page, which is confusing, anyhow. On the other hand, if they are really only phising attempts, not viruses (despite the javascript code), then this organization has got to talk to their mail host admin so that some viruses do not get blocked. - -- Cheers, Carlos Robinson -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.0 (GNU/Linux) Comment: Made with pgp4pine 1.76 iD8DBQFDNerNtTMYHG2NR9URAubcAKCU6/C8GlMulAG3kfNeBW21ylRAUACgiMcx OfOVkralfUQOXHUJ76BFyNY= =qb/9 -----END PGP SIGNATURE-----