[clamav-users] Is the signature "Win.Tool.Hoax-9939325-0" really problematic ?

[Al Varnell]

On Apr 11, 2022, at 12:05 AM, alex via clamav-users <clamav-users at lists.clamav.net> wrote:
> Is there a way to bypass the lifting of this signature, without completely ignoring it, if it ultimately proves useful against other files?

You can include an .fp file. See the documentation for format:

<https://docs.clamav.net/manual/Signatures/AllowLists.html?highlight=.fp#file-allow-lists>

-Al-


-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4376 bytes
Desc: not available
URL: <https://lists.clamav.net/pipermail/clamav-users/attachments/20220411/ecd699ca/attachment.bin>