Resolved Drweb to omit scanning of certain file type

[William Fong]

Hi,
Did anybody have experience into getting drweb to exclude the scanning of certain file types?
I couldn't find any info on it.

Thanks,
William

 

[UFHH01]

Hi William Fong,

you are able to configure DrWeb over the file "drweb32.ini", located at "/etc/drweb".

By default settings, the following ( possible ) file type - definitions are commented, in order to let DrWeb scan for all file types:

# FilesTypes = {MultiString} (EXE,COM,SYS,OV?,BAT,BIN,DRV,PRG,BOO,
# SCR,CMD,VXD,386,DLL,FON,DO?,XL?,WIZ,RTF,CL*,HT*,VB*,JS*,INF,AR?,
# ZIP,R??,PP?,OBJ,LIB,HLP,MD?,INI,MBR,IMG,CSC,CPL,MBP,SHS,SHB,PIF,
# SO,CHM,REG,XML,PRC,ASP,LSP,MSO,OBD,THE*,NWS,SWF,BMP,MPP,OCX,DVB,
# CPY,MSG,EML)
# File types to be checked during "by type" scan.
# FilesTypes = EXE,COM,SYS,OV?,BAT,BIN,DRV,PRG,BOO,SCR,CMD,VXD,386,DLL,FON,DO?
# FilesTypes = XL?,WIZ,RTF,CL*,HT*,VB*,JS*,INF,AR?,ZIP,R??,PP?,OBJ,LIB,HLP,MD?
# FilesTypes = INI,MBR,IMG,CSC,CPL,MBP,SHS,SHB,PIF,SO,CHM,REG,XML,PRC,ASP,LSP
# FilesTypes = MSO,OBD,THE*,NWS,SWF,BMP,MPP,OCX,DVB,CPY,MSG,EML

If you desire a unique modification, pls. consider to comment out the examples and use your very own setting.


You still should be aware, that in case of updates/upgrades/patches, the file "drweb32.ini" could be overwritten by Plesk.

 

[William Fong]

Hi UFHH01,

I've comment out the 4 rolls of FilesTypes, took out XL?, and also set ScanFiles = ByType.
I'll see how it goes as do we experience false positives for incoming .xlsm attachment files in our environment.

Thank you.

Hi William Fong,

you are able to configure DrWeb over the file "drweb32.ini", located at "/etc/drweb".

By default settings, the following ( possible ) file type - definitions are commented, in order to let DrWeb scan for all file types:

# FilesTypes = {MultiString} (EXE,COM,SYS,OV?,BAT,BIN,DRV,PRG,BOO,
# SCR,CMD,VXD,386,DLL,FON,DO?,XL?,WIZ,RTF,CL*,HT*,VB*,JS*,INF,AR?,
# ZIP,R??,PP?,OBJ,LIB,HLP,MD?,INI,MBR,IMG,CSC,CPL,MBP,SHS,SHB,PIF,
# SO,CHM,REG,XML,PRC,ASP,LSP,MSO,OBD,THE*,NWS,SWF,BMP,MPP,OCX,DVB,
# CPY,MSG,EML)
# File types to be checked during "by type" scan.
# FilesTypes = EXE,COM,SYS,OV?,BAT,BIN,DRV,PRG,BOO,SCR,CMD,VXD,386,DLL,FON,DO?
# FilesTypes = XL?,WIZ,RTF,CL*,HT*,VB*,JS*,INF,AR?,ZIP,R??,PP?,OBJ,LIB,HLP,MD?
# FilesTypes = INI,MBR,IMG,CSC,CPL,MBP,SHS,SHB,PIF,SO,CHM,REG,XML,PRC,ASP,LSP
# FilesTypes = MSO,OBD,THE*,NWS,SWF,BMP,MPP,OCX,DVB,CPY,MSG,EML

If you desire a unique modification, pls. consider to comment out the examples and use your very own setting.


You still should be aware, that in case of updates/upgrades/patches, the file "drweb32.ini" could be overwritten by Plesk.