Cisco-Talos / clamav

ClamAV - Documentation is here: https://docs.clamav.net

Home Page:https://www.clamav.net/

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Password Protected Doc File PUA.Doc.Packed.EncryptedDoc-6563700-0

anandcloudcall opened this issue · comments

How to prevent .docx file to mark as unsafe

If you wish to report an FP, you can submit it here: https://www.clamav.net/reports/fp
If you wish to report undetected malware, you can submit it here: https://www.clamav.net/reports/malware

It's not clear to me what you're asking. Regardless, this ticket queue is to report bugs in clamav and not detection issues.

I would also note that you appear have PUA (Potentially Unwanted Application) signature enabled. PUA signatures detect stuff that is suspicious or undesirable but is often times not actually malware. With PUA signatures in particular, you may simply need to ignore the alert.

If you want ClamAV to trust the specific file, or ignore a specific signature, you can create a signature and add it to your ClamAV database directory. For details: https://docs.clamav.net/manual/Signatures/AllowLists.html