clamav-users June 2008 archive
Main Archive Page > Month Archives  > clamav-users archives
clamav-users: Re: [Clamav-users] Creating custom Phish DB signat

Re: [Clamav-users] Creating custom Phish DB signatures (pdb format)

From: Srinivasan Krishnan <srini.coder_at_nospam>
Date: Mon Jun 23 2008 - 13:33:21 GMT
To: "ClamAV users ML" <clamav-users@lists.clamav.net>


Thanks for the response!

I just wanted to identify the cases where paypal.com is the real URL and yahoo.com is the displayable URL, to be identified as virus. Seems like clamscan doesn't identify cases where (real_URL != displayable_URL) as virus automatically (or am I missing something).

>> Why do you need regular expressions for the domainlist?
My idea of using regular expressions is to match cases where you might have numbers or some special characters (like hyphens) before a subdomain.

Thanks,
Srini



Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml