[clamav-users] MailFollowUrl alternative?

[Mauro Celli]

Some ramsomware send an email with a link to download one zip with a excel or word docunent with a macro.
This macro download another code and crypt files on pc.
I need to scan all possible downloaded file for my custommers...
The macro signature is present in clamav unofficial signatures, but i need clamav download and scan all url in email....
phishsigs is not for me, i need MailFollowURL....
Thanks


Il 31 Mar 2017 8:14 PM, Steven Morgan <smorgan at sourcefire.com> ha scritto:
Mauro,

It is not clear what MailFollowURL did. Have a look at
docs/phishsigs_howto.pdf for a description of how to scan for URLs. This
may have subsumed MailFollowURL.

Steve

On Fri, Mar 31, 2017 at 12:34 PM, Mauro Celli <mauro.celli at 2000net.it>
wrote:

> Hi,
> i need to scan link in email, in the past i use MailFollowUrl but now is
> deprecated,
> There are an alternative to make this test?
> Thanks
> _______________________________________________
> clamav-users mailing list
> clamav-users at lists.clamav.net
> http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
>
>
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
>
> http://www.clamav.net/contact.html#ml
>
_______________________________________________
clamav-users mailing list
clamav-users at lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml