Unofficial clamav phishing sigs

[Scott Silva]

Richard Siddall spake the following on 6/8/2006 2:30 PM:
> Ugo Bellavance wrote:
>> What do you mean by disinfected?
>>
> 
> I mean the recipient of the phishing e-mail gets an e-mail with the
> infected portion removed.
> 
> Subject: Disinfected: Clalis Sale Oonline!
> X-Mailer: MailScanner
> X-Elirion-Mailscanner: Disinfected
> 
> And the body is usually:
> 
> 1
> 1
> 1
> 1
> 1
> 1
> 1
> 1
> 1
> 1
> 1
> 1
> 
> I haven't found time to debug this yet.
> 
> Regards,
> 
> 	Richard Siddall
> 
Comes from the setting in mailscanner.conf:
# Do you want to deliver messages once they have been cleaned of any
# viruses?
# By making this a ruleset, you can re-create the "Deliver From Local"
# facility of previous versions.
Deliver Cleaned Messages = yes


-- 

MailScanner is like deodorant...
You hope everybody uses it, and
you notice quickly if they don't!!!!