[clamav-users] Another possible FP?

[Al Varnell]

Joel & Alain,

Finally had some time to check and now see that I am also observing this in 22 messages, most, if not all of which are the same ones identified in the first case. I suspect that these detections were not previously made because they were masked by Email.Phishing.VOF1-6295284-0 which identified 47 messages.

I uploaded one of several mailings from my water district:
d81b0950ab1f524ef325b78beee34166:71221:9676.emlx

-Al-

On Apr 23, 2017, at 11:42 AM, Joel Esler (jesler) <jesler at cisco.com> wrote:

> Are they FPs?  Or just alerts?
> 
> --
> Sent from my iPhone
> 
>> On Apr 23, 2017, at 14:17, "admin at web-envy.com" <admin at web-envy.com> wrote:
>> 
>> I can confirm that today I did not get any of these FPs, however I am
>> getting a bunch of these instead. A lot of them are on older email messages
>> that look like normal messages:
>> 
>> 
>> 
>>              Email.Phishing.VOF1-6295446-0
>> 
>> 
>> 
>> 
>> 
>> _______________________________________________
>> clamav-users mailing list
>> clamav-users at lists.clamav.net
>> http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
>> 
>> 
>> Help us build a comprehensive ClamAV guide:
>> https://github.com/vrtadmin/clamav-faq
>> 
>> http://www.clamav.net/contact.html#ml
> _______________________________________________
> clamav-users mailing list
> clamav-users at lists.clamav.net
> http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
> 
> 
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
> 
> http://www.clamav.net/contact.html#ml

-Al-
-- 
Al Varnell
Mountain View, CA