Whitelist it, send your sample, then remove the whitelist.

dp

On 1/3/16 11:57 AM, Walter H. wrote:
Hello,

not only the downloaded content is checked, also the uploaded content, as this makes it impossible
uploading a file to VirusTotal, when e.g. the following inside a .cdb is active

Sanesecurity.Foxhole.Zip_doc_js:CL_TYPE_ZIP:*:[. -_]([Dd][Oo][Cc])(([. _]){1,})([Jj][Ss])$:*:*:*:*:*:*
(Foxhole_generic.cdb)

Greetings,
Walter




_______________________________________________
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

_______________________________________________
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Reply via email to