On 8/20/2019 11:51 AM, Asok Kumar via clamav-users wrote:
i am using ClamAV version 0.101.3 and using the parameters below and Heuristics.Limits.Exceeded FOUND because i have enabled it in scanning. how do i add specific files to the whitelist ?

This should probably be documented better on the website.

To whitelist a specific file, add its SHA1 fingerprint to local.sfp in the clam database directory (any file that ends with .sfp will work)

To get the fingerprint, use the "sigtool" program included with clam.

sigtool --sha1 filename

this will return a string containing
SHA1:FileSize:filename

paste the whole string into local.sfp. You'll probably need to create the local.sfp file the first time you do this as it's not present by default.

clamscan will pick up the change immediately. If you use clamdscan, you'll need to reload clamd.






  -- Noel Jones

_______________________________________________

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Reply via email to