The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

ClamAV signatures database

Discussion in 'Security' started by Ajdin, Jul 12, 2016.

Tags:
  1. Ajdin

    Ajdin Member

    Joined:
    Sep 17, 2015
    Messages:
    8
    Likes Received:
    0
    Trophy Points:
    1
    Location:
    Novi Travnik
    cPanel Access Level:
    Root Administrator
    Hi,

    Can someone tell me where can I find ClamAV signature databases to exclude some rules?

    Kind regards.
     
  2. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    30,678
    Likes Received:
    651
    Trophy Points:
    113
    cPanel Access Level:
    Root Administrator
    Hello,

    You can create the following file in order to whitelist virus definitions with ClamAV:

    Code:
    /usr/local/cpanel/3rdparty/share/clamav/local.ign2
    For example, if ClamAV detected a virus on a test.swf file like this:

    Code:
    # /usr/local/cpanel/3rdparty/bin/clamscan /home/123
    /home/123/test.swf: Swf.Exploit.CVE_2016_0968-1 FOUND
    You would run the following commands to whitelist that definition:

    Code:
    echo Swf.Exploit.CVE_2016_0968-1 >> /usr/local/cpanel/3rdparty/share/clamav/local.ign2
    /scripts/restartsrv_clamd
    Thank you.
     
    el_zat and quizknows like this.
Loading...

Share This Page