Unofficial clamav phishing sigs

[Richard Siddall]

Ugo Bellavance wrote:
> 
> What do you mean by disinfected?
> 

I mean the recipient of the phishing e-mail gets an e-mail with the
infected portion removed.

Subject: Disinfected: Clalis Sale Oonline!
X-Mailer: MailScanner
X-Elirion-Mailscanner: Disinfected

And the body is usually:

1
1
1
1
1
1
1
1
1
1
1
1

I haven't found time to debug this yet.

Regards,

	Richard Siddall