Message Quarantine Report has a virus???!!! (SOLVED)

Report bugs and workarounds
Post Reply
keysteal
Posts: 6
Joined: 10 Nov 2018 07:25

Message Quarantine Report has a virus???!!! (SOLVED)

Post by keysteal » 01 May 2019 09:42

Hi,

I cannot send Message Quarantine Report to a couple of users has clamav find a virus into report html! Virus (Bofhland.Cracked.url.2672646.UNOFFICIAL)
How is it possible???
Last edited by keysteal on 04 May 2019 06:28, edited 1 time in total.

keysteal
Posts: 6
Joined: 10 Nov 2018 07:25

Re: Message Quarantine Report has a virus???!!!

Post by keysteal » 04 May 2019 06:28

Anyway, if anyone have a false positive when sending the Message Quarantine Report by Clamav, this is
what I did:
I found these files in Clamav that whitelisted signatures:

/var/lib/clamav/sigwhitelist.ign2
/var/lib/clamav-unofficial-sigs/dbs-ss/pit-whitelist.ign2
/var/lib/clamav-unofficial-sigs/dbs-ss/sigwhitelist.ign2

edit each of them and add the false positive virus. In my case the virus
found was Bofhland.Cracked.url.2672646.UNOFFICIAL, but don't add it as you
see it, remove the .UNOFFICIAL, so:
Bofhland.Cracked.url.2672646
Ok. Now restart the Clamav Service with
sudo service clamd restart

Post Reply