clamav-users December 2010 archive
Main Archive Page > Month Archives  > clamav-users archives
clamav-users: Re: [clamav-users] ClamAV and Mal/Phish-A

Re: [clamav-users] ClamAV and Mal/Phish-A

From: TAN BUI <tan_at_nospam>
Date: Mon Dec 13 2010 - 15:49:43 GMT
To: ClamAV users ML <>

On Sat, 11 Dec 2010, Al Varnell wrote:

> The Sophos site gives three aliases for Mal/Phish-A: PHISH/CartasiFraud,
> PHISH/HSBC and Trojan:JS/Cardst. Searching the clamav database I can find
> one instance of cardst which is Trojan.JS.Cardst with an ASCII signature of
> "nction click() { if (event.button==2) { window.moveto(0, 0)
> window.moveto(1, 1) window.moveto(2, 2) window.moveto(3, 3) win" so it would
> appear that clamav should be at least partially effective against this.

Thank you for the information; it is reassuring.


Tan Bui
Montreal, Quebec, Canada
Help us build a comprehensive ClamAV guide: visit