"Heuristic.Phishing.email.SpoofedDomain" Virus

WZZZ wrote:

thanks for the word on the registration. Perhaps that e-mail will arrive eventually or Mark will be able to look into it.

Mark was in London today, but I'm sure he'll take care of it when he gets back.

WZZZ wrote:

One more quick hijack: I completely forgot to ask, will ClamX, by default, scan invisible files for any given selection?

Yes, as long as you have read access to a file it will scan it.

I am seeing "Show invisible files" as a separate box to check when you go into Source List, so wondered if it's necessary to check that box and then select all those different invisibles in order for ClamX to scan them? This was the question I wanted to ask when I tried registering for the forum.

That is for when you are looking for a specific file or directory that is invisible so that it can be selected. If you opt to scan a directory that contains invisible files, they will be scanned regardless of whether the box is checked or not.

Great. Thanks again.

macfrombrampton wrote:

The Malware identified by Clamxav it finds only in Monster Apple Mail. the Monster emails do have links as a copy of the text portion email below shows. I don't know if Email is valid but Clamxav is consistent in identifing this Email as well as other Monster advertising Emails only.

I don't know either. It looks to be OK, but I did find some inconsistencies.

First of all, I check the ClamXav database and can verify that monster.com is one of the protected domains that is checked but monster.ca is not, and as you will see there is one instance of that: "Add monster@e0.monster.com...". Why they would list that when the rest of the domains are all monster.ca is strange to me. I think the fact that it comes from monster.ca and contains a monster.com URL is enough to have marked this as a possible phishing attempt, but it could well be a simple mistake on the message author's part.

I did check out the my.monster.ca web site privacy page and it checks as being OK to Google Safe Browsing and WOT, however there is a TRUSTe icon on that page which comes back with monster.com, not monster.ca. Another oversight?

Since this is simply an invitation to Virtual Job Fair, it seems harmless enough, especially since it occurred in the past. If they were really phishing I would think they would be asking you for a resume and a lot of privacy information to go with it.

Hope this helps.

macfrombrampton wrote:

This malware Heuristic.Phishing.email.SpoofedDomain will prevent a Apple Mail veresion 4.5 used in Snow leopard from delivering sent mail to a destination .

This is totally false.

What are your qualifications as a malware tester?

Complete and utter nonsense! It's not malware, it's a possible phishing e-mail. So how exactly did you test it?

Nonsense! First, as has been pointed out to you an uncountable number of times, that is not malware, it is a potential phishing e-mail. Secondly, how did you remove it? By deleting the e-mail message? Surely you don't think that actual malware would be so easy to delete, do you? As to the e-mail problem, some other factor is at play there, not malware.

I say all this not to educate you, which I've completely given up on, but to ensure your nonsense does not cause unnecessary anxiety in others who stumble on this topic.

macfrombrampton wrote:

Describe to me what you think a phishing EMail would perform

From WikipediA:

Phishing is attempting to acquire information (and sometimes, indirectly, money) such as usernames, passwords, and credit card details by masquerading as a trustworthy entity in an electronic communication.

Describe to me what you think a phishing EMail would perform, as you are not calling it Malware?

A phishing e-mail pretends to be from a legitimate entity, and tries to get you to visit a site that is not legit, but looks very much like the web site of the spoofed entity, in an attempt to get you to enter some personal information, such as your login credentials. There is no malware involved, just a fake link in an e-mail that has been spoofed to look like it comes from someone else.

This has been explained to you numerous times before.

Malware is widely considered to be defined as including computer viruses, worms, trojanhorses, spyware, adware, most rootkits, and other malicious programs. E-mail messages are not any of these things although an attachment could be.