On Mon, 23 Oct 2023 09:16:20 +0100 Peter Berrie peter.northerly@gmail.com allegedly wrote:
This gets even more puzzling. Running clamav now for about two days non stop (lots of timeouts) and I am getting many reports like this:
LibClamAV info: Suspicious link found! LibClamAV info: Real URL: http://www.globalkap.com LibClamAV info: Display URL: https://secure.skype.com
[ some deletia ]
Anyone have any ideas what to do? Is there any more useful AV to try?
Peter
The most likely source of the odd links in my view would be your email. The big problem with HTML email (apart from it being a complete bastardisation of all the RFC standards) is that it allows for embedded links which can point practically anywhere. A good email client will normally warn you if an embedded link points somewhere odd.
If I were you, I would take a look in your email store.
Mick
--------------------------------------------------------------------- Mick Morgan gpg fingerprint: FC23 3338 F664 5E66 876B 72C0 0A1F E60B 5BAD D312 blog: baldric.net ---------------------------------------------------------------------