Re: [clamav-users] How do I get something added to the ignore list

[Tim McConnell via clamav-users]

Thank You Micah!!! 

On Thu, 2023-06-08 at 20:20 +, Micah Snyder (micasnyd) wrote:
> If you wish to ignore the PUA.Doc.Tool.LibreOfficeMacro-2 signature,
> you can create a .ign2 signature file in your clamav database
> directory.
> 
> See 
> https://docs.clamav.net/manual/Signatures/AllowLists.html#signature-
> ignore-lists for details.
> 
> 
> 
> Micah Snyder
> ClamAV Development
> Talos
> Cisco Systems, Inc.
> From: clamav-users  on behalf
> of Tim McConnell via clamav-users 
> Sent: Thursday, June 8, 2023 10:12 AM
> To: Joel Esler ; ClamAV users ML
> 
> Cc: Tim McConnell 
> Subject: Re: [clamav-users] How do I get something added to the
> ignore list
>  
> Well I would assume the clam DB but I've no idea how or any of that.
> I would think the new Macro for Libre Office Calc would be in there
> already but I've been wrong before. 
> 
> On Thu, 2023-06-08 at 13:03 -0400, Joel Esler wrote:
> > What db do you think you want to add it to?
> > 
> > — 
> > Sent from my iPhone
> > 
> > > On Jun 8, 2023, at 12:35, Tim McConnell via clamav-users
> > >  wrote:
> > > 
> > > 
> > > Thanks for that AL, now how do I add to the DB? Two things I'm
> > > not is a programmer or DBA :-(
> > > 
___

Manage your clamav-users mailing list subscription / unsubscribe:
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/Cisco-Talos/clamav-documentation

https://docs.clamav.net/#mailing-lists-and-chat

Re: [clamav-users] How do I get something added to the ignore list

[Micah Snyder (micasnyd) via clamav-users]

If you wish to ignore the PUA.Doc.Tool.LibreOfficeMacro-2 signature, you can 
create a .ign2 signature file in your clamav database directory.

See 
https://docs.clamav.net/manual/Signatures/AllowLists.html#signature-ignore-lists
 for details.



Micah Snyder
ClamAV Development
Talos
Cisco Systems, Inc.

From: clamav-users  on behalf of Tim 
McConnell via clamav-users 
Sent: Thursday, June 8, 2023 10:12 AM
To: Joel Esler ; ClamAV users ML 

Cc: Tim McConnell 
Subject: Re: [clamav-users] How do I get something added to the ignore list

Well I would assume the clam DB but I've no idea how or any of that. I would 
think the new Macro for Libre Office Calc would be in there already but I've 
been wrong before.

On Thu, 2023-06-08 at 13:03 -0400, Joel Esler wrote:
What db do you think you want to add it to?

—
Sent from my iPhone

On Jun 8, 2023, at 12:35, Tim McConnell via clamav-users 
mailto:clamav-users@lists.clamav.net>> wrote:


Thanks for that AL, now how do I add to the DB? Two things I'm not is a 
programmer or DBA :-(

___

Manage your clamav-users mailing list subscription / unsubscribe:
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/Cisco-Talos/clamav-documentation

https://docs.clamav.net/#mailing-lists-and-chat

Re: [clamav-users] How do I get something added to the ignore list

[Tim McConnell via clamav-users]

Well I would assume the clam DB but I've no idea how or any of that. I
would think the new Macro for Libre Office Calc would be in there
already but I've been wrong before. 

On Thu, 2023-06-08 at 13:03 -0400, Joel Esler wrote:
> What db do you think you want to add it to?
> 
> — 
> Sent from my iPhone
> 
> > On Jun 8, 2023, at 12:35, Tim McConnell via clamav-users
> >  wrote:
> > 
> > 
> > Thanks for that AL, now how do I add to the DB? Two things I'm not
> > is a programmer or DBA :-( 
> > 
___

Manage your clamav-users mailing list subscription / unsubscribe:
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/Cisco-Talos/clamav-documentation

https://docs.clamav.net/#mailing-lists-and-chat

Re: [clamav-users] How do I get something added to the ignore list

[Joel Esler via clamav-users]

What db do you think you want to add it to?— Sent from my iPhoneOn Jun 8, 2023, at 12:35, Tim McConnell via clamav-users  wrote:Thanks for that AL, now how do I add to the DB?  Two things I'm not is a programmer or DBA :-( -- Tim McConnell On Thu, 2023-06-08 at 05:01 -0700, Al Varnell wrote:First get the file's hash value:sigtool --md5 /home/tmick/.config/libreoffice/4/user/basic/Standard/Module1.xbaThen copy the results to an fp.local file. You will probably have to create such a file and add it to the ClamAV database.-Al-On Jun 7, 2023, at 11:45 AM, Tim McConnell via clamav-users  wrote:Hi all, I get this in my report:/home/tmick/.config/libreoffice/4/user/basic/Standard/Module1.xba:PUA.Doc.Tool.LibreOfficeMacro-2 FOUNDHow do I request the macro be added to the safe list? Thanks! -- Tim McConnell 
___Manage your clamav-users mailing list subscription / unsubscribe:https://lists.clamav.net/mailman/listinfo/clamav-usersHelp us build a comprehensive ClamAV guide:https://github.com/Cisco-Talos/clamav-documentationhttps://docs.clamav.net/#mailing-lists-and-chat___

Manage your clamav-users mailing list subscription / unsubscribe:
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/Cisco-Talos/clamav-documentation

https://docs.clamav.net/#mailing-lists-and-chat

Re: [clamav-users] How do I get something added to the ignore list

[Tim McConnell via clamav-users]

Thanks for that AL, now how do I add to the DB? Two things I'm not is a
programmer or DBA :-( 

-- 
Tim McConnell 


On Thu, 2023-06-08 at 05:01 -0700, Al Varnell wrote:
> First get the file's hash value:
> 
> sigtool --md5
> /home/tmick/.config/libreoffice/4/user/basic/Standard/Module1.xba
> 
> Then copy the results to an fp.local file. You will probably have to
> create such a file and add it to the ClamAV database.
> 
> -Al-
> 
> > On Jun 7, 2023, at 11:45 AM, Tim McConnell via clamav-users
> >  wrote:
> > 
> > Hi all, 
> > I get this in my report:
> > /home/tmick/.config/libreoffice/4/user/basic/Standard/Module1.xba:
> > PUA.Doc.Tool.LibreOfficeMacro-2 FOUND
> > How do I request the macro be added to the safe list? 
> > Thanks! 
> > 
> > -- 
> > Tim McConnell 
___

Manage your clamav-users mailing list subscription / unsubscribe:
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/Cisco-Talos/clamav-documentation

https://docs.clamav.net/#mailing-lists-and-chat

Re: [clamav-users] How do I get something added to the ignore list

[Al Varnell via clamav-users]

First get the file's hash value:

sigtool --md5 /home/tmick/.config/libreoffice/4/user/basic/Standard/Module1.xba

Then copy the results to an fp.local file. You will probably have to create 
such a file and add it to the ClamAV database.

-Al-

> On Jun 7, 2023, at 11:45 AM, Tim McConnell via clamav-users 
>  wrote:
> 
> Hi all, 
> I get this in my report:
> /home/tmick/.config/libreoffice/4/user/basic/Standard/Module1.xba:
> PUA.Doc.Tool.LibreOfficeMacro-2 FOUND
> How do I request the macro be added to the safe list? 
> Thanks! 
> 
> -- 
> Tim McConnell 
___

Manage your clamav-users mailing list subscription / unsubscribe:
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/Cisco-Talos/clamav-documentation

https://docs.clamav.net/#mailing-lists-and-chat

[clamav-users] How do I get something added to the ignore list

[Tim McConnell via clamav-users]

Hi all, 
I get this in my report:
/home/tmick/.config/libreoffice/4/user/basic/Standard/Module1.xba:
PUA.Doc.Tool.LibreOfficeMacro-2 FOUND
How do I request the macro be added to the safe list? 
Thanks! 

-- 
Tim McConnell 
___

Manage your clamav-users mailing list subscription / unsubscribe:
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/Cisco-Talos/clamav-documentation

https://docs.clamav.net/#mailing-lists-and-chat