ClamWin Free Antivirus Forum Index
ClamWin Free Antivirus
Support and Discussion Forums
Reply to topic
How does the exclude filter work?
simonmason


Joined: 11 Oct 2009
Posts: 0
Reply with quote
I have a false positive with a file in one of my directories. I added it to the filter as follows: C:\Program Files\Serv-U\ServUDaemon.exe. This didn't work and I still get the report. So I changed it to C:\Program Files\Serv-U\*.exe. No go. I then tried C:\Program Files\Serv-U\* and I am still getting reports. How do I tell it to ignore this file? Thanks.
View user's profileSend private message
alch
Site Admin

Joined: 27 Nov 2005
Posts: 0
Reply with quote
If you scan an individual file the filters are ignored because you specifically want to scan that file, try scanning a folder after you added a filter.

Also please note that * does not include sub directories
to include sub-directories you need to use a regular expression wrapped in <> tags
<C\:\\Program Files\\Serv-U\\.*>
View user's profileSend private message
simonmason


Joined: 11 Oct 2009
Posts: 0
Reply with quote
I am to assume from your example that if I just wanted to have it ignore the files in one directory (and not the sub-directories) then I should use the following:

C\:\\Program Files\\Serv-U\\*

and not:

C:\Program Files\Serv-U\*

Thanks?
View user's profileSend private message
alch
Site Admin

Joined: 27 Nov 2005
Posts: 0
Reply with quote
simonmason wrote:
I am to assume from your example that if I just wanted to have it ignore the files in one directory (and not the sub-directories) then I should use the following:

C\:\\Program Files\\Serv-U\\*

and not:

C:\Program Files\Serv-U\*

Thanks?


no, you should use C:\Program Files\Serv-U\*

this: C\:\\Program Files\\Serv-U\\* is a regular expression and should be enclosed in <>:
<C\:\\Program Files\\Serv-U\\*>

even then it would only match a single letter files as * in regex is any character. and .* is any character repeated multiple times
View user's profileSend private message
simonmason


Joined: 11 Oct 2009
Posts: 0
Reply with quote
I still can't get this working.

I have the following filters set:

C:\Program Files\Serv-U\*
<C>

and this morning I get the following:

C:\PROGRA~1\Serv-U\ServUDaemon.exe: Trojan.Agent.ND-5 FOUND

What am I missing here? Thanks.
View user's profileSend private message
alch
Site Admin

Joined: 27 Nov 2005
Posts: 0
Reply with quote
How are you scanning - a scheduled scan or some other way?

Also not sure where did the 8.3 name (C:\PROGRA~1\Serv-U) came from but you could try the following exclusion filter:
C:\PROGRA~1\Serv-U\*
View user's profileSend private message
simonmason


Joined: 11 Oct 2009
Posts: 0
Reply with quote
I am doing it through a scheduled scan. I am not sure where the 8.3 is coming from - it is what I see in the report that I am emailed when it finds the false positive. I will try inserting the filter as you suggest.
View user's profileSend private message
How does the exclude filter work?
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
All times are GMT  
Page 1 of 1  

  
  
 Reply to topic