Hi there ! Anybody could tell me how safebrowsing.cld is created/updated
? Which database are used to create it ? I´m asking ´cause there is a
client (domain nosdacomunicacao.com) complaining that they are not
listed anymore with google (they were listed in stopbadware.org in Sep
8th and Sep 11th) but clamav still recognize all e-mails containing this
URL in body as Suspect
(Safebrowsing.Suspected-malware_safebrowsing.clamav.net FOUND).
How can I whitelist this URL in clamav ? I already tried create a
daily.wdb file with:
X:.+www\.nosdacomunicao\.com.+:.+www\.nosdacomunicao\.com.+
and another with
M:www.nosdacomunicacao.com
without success. Any ideas ?
PS: Running clamscan with debug enabled I always got:
(when putting
X:.+www\.nosdacomunicao\.com.+:.+www\.nosdacomunicao\.com.+ in daily.wdb
file)
....
LibClamAV debug: Loading regex_list
*LibClamAV debug: regex_list: added new suffix /, for regex:
.+www\.nosdacomunicao\.com.+:.+www\.nosdacomunicao\.com.+/*
LibClamAV debug: /C3Systems/clamav/bin-0.95.1/share/clamav/daily.wdb loaded
...
(when putting M:www.nosdacomunicacao.com in daily.wdb file)
LibClamAV debug: Loading regex_list
*LibClamAV debug: regex_list: added new suffix /moc.oacinumocadson.www,
for regex: /moc.oacinumocadson.www*
LibClamAV debug: /C3Systems/clamav/bin-0.95.1/share/clamav/daily.wdb loaded
LibClamAV debug: Phishcheck:Checking url http://www.nosdacomunicacao.com/->
LibClamAV debug: Looking up hash
03F186E34BC87B0BC20FD1E7A0B1C723DA587D3590B7810C091F272851D3DA9E for
nosdacomunicacao.com/(21)(0)
LibClamAV debug: prefix matched
LibClamAV debug: This hash matched:
03F186E34BC87B0BC20FD1E7A0B1C723DA587D3590B7810C091F272851D3DA9E
*LibClamAV debug: Hash matched for: http://www.nosdacomunicacao.com/*
*LibClamAV debug: Phishcheck: Phishing scan result: Blacklisted
LibClamAV debug: found Possibly Unwanted:
Safebrowsing.Suspected-malware_safebrowsing.clamav.net
*LibClamAV debug: blobDestroy
Regards !
Claudio Cuqui
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml
