Greetings,

Is there a way to copy to quarantine directory if and only if the file to
be copied and identified as a match against the VSD does not exist in the
quarantine directory already either matching a hash or name or size?

Hit a case where a few false positives, copied to quarantine, were
forgotten to be removed by engineers which lead to a loop of "match, copy,
match, copy" everytime clamscan ran filling up eventually quarantine
directory.

Sure we can exclude the quarantine path from clamscan but if someone knows
that they can simply put things there to avoid the virus scanner.

Thanks much!!  And have a great Friday (or Saturday).
_______________________________________________
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Reply via email to