mailwatch / MailWatch

MailWatch for MailScanner is a web-based front-end to MailScanner
http://mailwatch.org/
GNU General Public License v2.0
117 stars 66 forks source link

Site http://www.securelist.com broken (VIRUS_INFO) #559

Closed stefaweb closed 7 years ago

stefaweb commented 7 years ago

Broken for days.

define('VIRUS_INFO', 'http://www.securelist.com/en/descriptions?words=%s&behavior=&Search=Search&search_type=1');

capture d ecran 2017-02-20 a 17 35 23

asuweb commented 7 years ago

It doesn't work reliably when you run multiple virus scanners, as it never recognises the vendor specific naming.

I've yet to find an alternative.

stefaweb commented 7 years ago

And this?

https://threats.kaspersky.com/en/?s=Constructor.DOS.G2

https://threats.kaspersky.com/en/threat/Constructor.DOS.G2

https://threats.kaspersky.com/en/threat/

You can look at this page.

https://en.wikipedia.org/wiki/Multiscanning

Skywalker-11 commented 7 years ago

@stefaweb The problem is that each anti virus has theire own names for viruses. Eg see here Virustotal.com

endelwar commented 7 years ago

What about removing it? I can't find a website that works with multivendor virus names

asuweb commented 7 years ago

Personally, I would remove it. It serves little purpose and as you say, there are no reliable multi vendor sources

stefaweb commented 7 years ago

Not found a replacement too. I agree to remove this.

endelwar commented 7 years ago

I leaved the feature in place, but disabled by default in 8bd8fb8b3341ff2c8ffeaa68d9bf7c339d1d2eb4