avast vs clamscan

[zigzag]

[root@server bin]# ./avast /home/user/mail/Trash
/home/user/mail/Trash        [OK]
#
# Statistics:
#
# scanned files:        1
# scanned directories:  0
# infected files:       0
# total file size:      1,5 MB
# virus database:       140330-0 30.03.2014
# test elapsed:         0s 350ms
#
[root@server bin]# clamscan /home/user/mail/Trash
/home/user/mail/Trash: Heuristics.Phishing.Email.SpoofedDomain FOUND

----------- SCAN SUMMARY -----------
Known viruses: 3278397
Engine version: 0.98.1
Scanned directories: 0
Scanned files: 1
Infected files: 1
Data scanned: 4.11 MB
Data read: 1.55 MB (ratio 2.66:1)
Time: 13.345 sec (0 m 13 s)

[tumic]

You are using a 6 year old, no more supported version of avast, so it is no wonder, it does not detect some file...
Try the current version of avast, taht can be found here:
http://forum.avast.com/index.php?topic=145973.0

[zigzag]

scan -a /home/user/mail/Trash
/home/user/mail/Trash   [OK]

[tumic]

scan -a /home/user/mail/Trash
/home/user/mail/Trash   [OK]

Can you post the file or at least a link to it, so we can analyze it?

[zigzag]

Unfortunately not :|

[ShelbyGT5OO]

Hi,

[root@server bin]# clamscan /home/user/mail/Trash
/home/user/mail/Trash: Heuristics.Phishing.Email.SpoofedDomain FOUND

Did you use third party sigs for clamav ? According with the databases, there are many false positives.

 Heuristics.Phishing.Email.SpoofedDomain is know as giving false positive. Have a try with searching on google .

So this is not an issue with avast, but with clamav.

Regards.

ShelbyGT500

[tjraptis]

This is obviously a false positive. I do not understand how a file can be a Phishing website. Ensure you are not using third-party signatures for Clam AV.