[Clamav-devel] how to avoid false positive in clamAV
Gaurav Kumar Garg
gaurav.garg at uniscon.de
Wed Apr 5 04:49:07 EDT 2017
Hi ClamAV user, developer,
I am new to clamAV. I like its design.
While scanning i saw few false positive virus. I search on internet and
found out that i can avoid these false positive by writing md5 sum to
local.ign file and putting this file in /var/lib/clamav/* directory.
then restarting clamd daemon.
Its partially working, means it working when i scan false positive file
with clamscan -d and its not working with clamdscan.
Steps for creating local.ign file:
$ sigtool --md5 my_file_name.exe >> local.ign
after that i put this file in /var/lib/clamav/* directory and restarted
when i execute $ clamscan -d /var/lib/clamav/local.ign my_file_name.exe
then its not reporting false positive, its working perfectly.
But when i scan this file using clamdscan then its still reporting false
Could anyone help me regarding this false positive avoidance.
I can not submit my false positive file because of some business ethics
Thank you in advance,
More information about the clamav-devel