[clamav-users] SpoofedDomain FOUND

[Reindl Harald]

Am 16.02.2017 um 14:27 schrieb ellanios82:
> On 02/16/17 15:00, Mark Allan wrote:
>> simply to add 2>&1 to the end of your command, to redirect stderr to
>> stdout.
>>
>> clamscan
>> --debug/home/user/.thunderbird/9i9wirek.default/Mail/pop.gmail.com/bus<http://pop.gmail.com/bus>
>> >> clamdeb.txt 2>&1
>
>  - again thank you for being Really helpful { not just demonstrating
> 'clever' }

next time type "output redirection works only partly" as i did years ago 
without need to ask somebody when you think it's a good way to offend 
people trying help you to *learn and understand* something instead keep 
you a copy&paste monkey

>  - turns out the Spoofed Domain message was from PayPal

it was not spoofed (if you are talk about the attachment yesterday) but 
another false positive like 999 out of 1000 where clamd hits for this 
rule/signature