ClamWin Free Antivirus :: View topic - Avoiding e-mail alerts on just phishing?

Posted: Thu Dec 14, 2006 5:41 pm

Hi,

I'm using ClamWin e-mail alerts to monitor for viruses/etc on our office network, but I am getting a lot of e-mails on mere phishing in Firefox's cache. How do I suppress alerts unless there is a more serious problem?

Code:

*** Scanned 28 processes - 443 modules ***
*** Computer Memory Scan Completed ***

c:\Documents and Settings\timh\Local Settings\Application Data\Mozilla\Firefox\Profiles\default.8mg\Cache\73217389d01: HTML.Phishing.Bank-983 FOUND
c:\Documents and Settings\timh\Local Settings\Application Data\Mozilla\Firefox\Profiles\default.8mg\Cache\7355A44Ad01: HTML.Phishing.Bank-983 FOUND

-- summary --
Known viruses: 80576
Engine version: 0.88.6
Scanned directories: 5564
Scanned files: 80322
Infected files: 2
Data scanned: 25176.63 MB
Time: 50469.431 sec (841 m 9 s)

Andrew

Posted: Sun Dec 24, 2006 3:35 am

ahz wrote:

I'm using ClamWin e-mail alerts to monitor for viruses/etc on our office network, but I am getting a lot of e-mails on mere phishing in Firefox's cache. How do I suppress alerts unless there is a more serious problem?

I believe if you go under ClamWin preferences, advanced, additional clamscan command line parameters, add the following: --no-html

I think that should disable the "HTML" detections.

Posted: Sun Dec 24, 2006 6:03 am

I guess you could also check to see if you've configured ClamWin preferences to filter for htm or html extensions and remove that--maybe hta extensions also.

Regards,

Posted: Mon Dec 25, 2006 1:08 am

I would to check if it will be reasonable (by changing a bit the code) to add a specific option for phishing,
it's very useful when scanning emails but not so much for a scan in a windows system,
It was already in my todo list

Posted: Tue Dec 26, 2006 4:38 pm

b0ne wrote:

I believe if you go under ClamWin preferences, advanced, additional clamscan command line parameters, add the following: --no-html

I think that should disable the "HTML" detections.

I will roll that out to the workstations and see what happens.

Quote:

I would to check if it will be reasonable (by changing a bit the code) to add a specific option for phishing,
it's very useful when scanning emails but not so much for a scan in a windows system,
It was already in my todo list

Thanks!

Posted: Tue Dec 26, 2006 8:37 pm

For the Google Summer of Code project, ClamAV had interns write some phishing detection code. I believe it will be available in release 0.90, which is in beta now. I hope ClamWin can utilize it.

Regards,