ClamWin Free Antivirus Forum Index
ClamWin Free Antivirus
Support and Discussion Forums
Reply to topic
Safebrowsing / anti-phishing - Check if link is suspicious
yinonb


Joined: 12 Sep 2019
Posts: 3
Location: Israel
Reply with quote
I've run the clamav safebrowsing and now I have the safebrowsing.cld file in the database
I submit all kinds of files with suspicious links for review and I get no notification,
When I ran with the --debug flag I saw the following message repeated:
LibClamAV debug: init_tdb: Signature for Phishtank.Phishing.PHISH_ID_5970789-6956916-0 not loaded (required f-level: 83
The file I send looks like this:
<html>
<a> test </a>
</html>

Does anyone have a solution for me? Rolling Eyes
View user's profileSend private message
Safebrowsing / anti-phishing [UPDATE]
yinonb


Joined: 12 Sep 2019
Posts: 3
Location: Israel
Reply with quote
(in the "a" tag I have href with a suspicious link)
View user's profileSend private message
GuitarBob


Joined: 09 Jul 2006
Posts: 4633
Location: USA
Reply with quote
Clam AV does not have enough signatures for ClamWin to protect users adequately. There are more than 300,000 individual versions of malware released each day, but Clam AV only prepares about 1,000 daily signatures. Despite this, however, I never use any virus databases other than the official Main and Daily databases that come from Clam AV in order to prevent any problems such as you have.

Instead, I rely upon browser addons to protect me from "bad" web sites and malware ads/popups. As recommended by the ClamWin developers, I also use a real-time AV as my primary AV and keep ClamWin as a backup. Most real-time AVs also have some browser protection.

I suggest that you do the same.

Regards,
View user's profileSend private message
yinonb


Joined: 12 Sep 2019
Posts: 3
Location: Israel
Reply with quote
I want to use it for scanning emails and IMs, not in the browser, so I have to use something like that, plus I want to have the ability to scan the links even without external network, so I need the clamav-safebrowsing solution.
Have you been able to test the clamav-safebrowsing?
Do you have a file that should be alerted so I can test it too?
View user's profileSend private message
GuitarBob


Joined: 09 Jul 2006
Posts: 4633
Location: USA
Reply with quote
The ClamWin project depends upon the Clam AV project, which is now owned by Cisco. The ClamWin developers merely prepare a Windows port from the Clam AV code intended for Linux email servers. This primarily entails adding a GUI, although they may make some changes to accommodate use on Windows. Clam AV is responsible for all virus detection and signatures.

You might check with Sane Security regarding any signatures they provide to Clam AV.

Regards,
View user's profileSend private message
Safebrowsing / anti-phishing - Check if link is suspicious
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
All times are GMT  
Page 1 of 1  

  
  
 Reply to topic