ClamAV exclude file extension?

teknom

Member
May 20, 2016
24
0
1
Turkey
cPanel Access Level
Root Administrator
hello guys, some of my clients have excel documents included macros and ClamAV gives false positive for this files. therefor emails could not deliver gives an error: 550 (Doc.Dropper.Agent-6342721-0)
- Removed Link No Need Here -

i want to know may i exclude excel files from ClamAV scanner?
 
Last edited by a moderator:

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,910
2,213
363
Hello,

You can create the following file in order to whitelist virus definitions with ClamAV:

Code:
/usr/local/cpanel/3rdparty/share/clamav/local.ign2
For example, if ClamAV detected a virus on a test.swf file like this:

Code:
# /usr/local/cpanel/3rdparty/bin/clamscan /home/123
/home/123/test.swf: Swf.Exploit.CVE_2016_0968-1 FOUND
You would run the following commands to whitelist that definition:

Code:
echo Swf.Exploit.CVE_2016_0968-1 >> /usr/local/cpanel/3rdparty/share/clamav/local.ign2
/scripts/restartsrv_clamd
Thank you.
 
  • Like
Reactions: rpvw