Re: [clamav-users] MailFollowUrl alternative?

2017-04-02 Thread G.W. Haywood
Hi there, On Sun, 2 Apr 2017, Matus UHLAR wrote: On 31.03.17 19:51, Steve Basford wrote: It did a curl on any urls found in the body ... among other, it provided spammers evidence their mail was read. Yes, almost the last thing you want to do is give some scrote feedback that he has a genu

Re: [clamav-users] MailFollowUrl alternative?

2017-04-01 Thread Matus UHLAR - fantomas
On 31 March 2017 19:14:36 Steven Morgan wrote: It is not clear what MailFollowURL did. Have a look at docs/phishsigs_howto.pdf for a description of how to scan for URLs. This may have subsumed MailFollowURL. On 31.03.17 19:51, Steve Basford wrote: It did a curl on any urls found in the body an

Re: [clamav-users] MailFollowUrl alternative?

2017-03-31 Thread Mauro Celli
Some ramsomware send an email with a link to download one zip with a excel or word docunent with a macro. This macro download another code and crypt files on pc. I need to scan all possible downloaded file for my custommers... The macro signature is present in clamav unofficial signatures, but i n

Re: [clamav-users] MailFollowUrl alternative?

2017-03-31 Thread Steve Basford
On 31 March 2017 19:14:36 Steven Morgan wrote: Mauro, It is not clear what MailFollowURL did. Have a look at docs/phishsigs_howto.pdf for a description of how to scan for URLs. This may have subsumed MailFollowURL. It did a curl on any urls found in the body and fetched the content... be

Re: [clamav-users] MailFollowUrl alternative?

2017-03-31 Thread Steven Morgan
Mauro, It is not clear what MailFollowURL did. Have a look at docs/phishsigs_howto.pdf for a description of how to scan for URLs. This may have subsumed MailFollowURL. Steve On Fri, Mar 31, 2017 at 12:34 PM, Mauro Celli wrote: > Hi, > i need to scan link in email, in the past i use MailFollowU