[prev in list] [next in list] [prev in thread] [next in thread] 

List:       clamav-users
Subject:    Re: [clamav-users] MailFollowUrl alternative?
From:       Mauro Celli <mauro.celli () 2000net ! it>
Date:       2017-03-31 18:52:29
Message-ID: fdc384b5-e107-4b71-ac10-f2b4695f4b5b () email ! android ! com
[Download RAW message or body]

Some ramsomware send an email with a link to download one zip with a excel or word \
docunent with a macro. This macro download another code and crypt files on pc.
I need to scan all possible downloaded file for my custommers...
The macro signature is present in clamav unofficial signatures, but i need clamav \
download and scan all url in email.... phishsigs is not for me, i need \
MailFollowURL.... Thanks


Il 31 Mar 2017 8:14 PM, Steven Morgan <smorgan@sourcefire.com> ha scritto:
Mauro,

It is not clear what MailFollowURL did. Have a look at
docs/phishsigs_howto.pdf for a description of how to scan for URLs. This
may have subsumed MailFollowURL.

Steve

On Fri, Mar 31, 2017 at 12:34 PM, Mauro Celli <mauro.celli@2000net.it>
wrote:

> Hi,
> i need to scan link in email, in the past i use MailFollowUrl but now is
> deprecated,
> There are an alternative to make this test?
> Thanks
> _______________________________________________
> clamav-users mailing list
> clamav-users@lists.clamav.net
> http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
> 
> 
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
> 
> http://www.clamav.net/contact.html#ml
> 
_______________________________________________
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

_______________________________________________
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


[prev in list] [next in list] [prev in thread] [next in thread]