ClamAV signatures database

Ajdin

• July 12, 2016 06:12

Hi, Can someone tell me where can I find ClamAV signature databases to exclude some rules? Kind regards.

• 

  cPanelMichael

  • July 12, 2016 13:41

  Hello, You can create the following file in order to whitelist virus definitions with ClamAV:
  /usr/local/cpanel/3rdparty/share/clamav/local.ign2
  For example, if ClamAV detected a virus on a test.swf file like this:
  # /usr/local/cpanel/3rdparty/bin/clamscan /home/123 /home/123/test.swf: Swf.Exploit.CVE_2016_0968-1 FOUND
  You would run the following commands to whitelist that definition:
  echo Swf.Exploit.CVE_2016_0968-1 >> /usr/local/cpanel/3rdparty/share/clamav/local.ign2 /scripts/restartsrv_clamd
  Thank you.

  0

Please sign in to leave a comment.