[clamav-users] False positive on Heuristics.Phishing.Email.SSL-Spoof, no attachment

[Robert Kudyba]

An important email from our university president was quarantined with
Heuristics.Phishing.Email.SSL-Spoof. I submitted the email as an attachment
to ClamAV. I'm also disabling it based on past reports such as
https://qmailtoaster-list.qmailtoaster.narkive.com/NYaYAjLl/disabling-clamav-heuristic-phishing-checks
,
https://portal.smartertools.com/community/a1225/how-to-disable-a-specific-clamav-scan.aspx
and https://sanesecurity.com/support/false-positives/

If anyone wants a sample I can send the email as an attachment.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.clamav.net/pipermail/clamav-users/attachments/20210420/61ac35eb/attachment.htm>