Instead of disabling Yara rules altogether (I use them),
in /etc/clamav-unofficial-sigs/user.conf commented out the line
Code: Select all
#yararulesproject_dbs_rating="HIGH"Code: Select all
systemctl restart clamd@scanSearch found 1 match
- 11 Jan 2021 19:47
- Forum: 4.x Bugs
- Topic: ALL PDF files are blocked due to antivirus false positive
- Replies: 5
- Views: 6044
Re: ALL PDF files are blocked due to antivirus false positive
Encountered the exact same issue today.
Instead of disabling Yara rules altogether (I use them),
in /etc/clamav-unofficial-sigs/user.conf commented out the line
and restarted clamscan
Instead of disabling Yara rules altogether (I use them),
in /etc/clamav-unofficial-sigs/user.conf commented out the line