[clamav-users] false positive on MBL_85256034.UNOFFICIAL with Google Drive links

Thu Apr 29 12:17:08 UTC 2021

How would you make this work for docs.google.com as well?

the following regex corresponds to https://drive.google.com
next if /^MBL_\d+:0:\*:68747470733a2f2f64726976652e676f6f676c652e636f6d$/;

On Thu, Apr 29, 2021, 12:25 AM Olivier <Olivier.Nicole at cs.ait.ac.th> wrote:

> Robert,
>
> In the configuration file user.conf for ClamAV-unofficial-sig, I set the
> following variable:
>
> clamd_reload_opt="/usr/local/bin/clamav-unofficial-sigs-post.pl"
>
> And the script is attached below.
>
> Best regards,
>
> Olivier
>
> --
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.clamav.net/pipermail/clamav-users/attachments/20210429/8307e81f/attachment.htm>