[clamav-users] SpoofedDomain FOUND

[ellanios82]

On 02/16/17 02:59, Al Varnell wrote:
> I'm afraid it's going to be more trouble than it's worth. You will need to turn debugging on when you scan that mailbox which will produce a huge amount of output, but includes details about exactly what was found. You would then need to search that mailbox in Thunderbird for the offending URL and decide whether you need the message or it can be deleted. A SpoofedDomain finding is not necessarily an attempt to misdirect you. It's a technique sometimes used to give a message clarity.

  thanks Al : am trying debug to find specific message causing probs :


  have adjusted /etc/clamd.conf to :

# Enable debug messages in libclamav.
# Default: no
# Feb 16, 2017
Debug yes


  But , how to collect info into Log-File :


this does not work for me :

clamscan --debug 
/home/user/.thunderbird/9i9wirek.default/Mail/pop.gmail.com/bus>>clamdeb.txt

- What please is correct syntax ?

thanks

  ellan

...