Announcement

Collapse
No announcement yet.

Files will be sent to ImunifyAV you can change this behavior in settings

Collapse
This topic has been answered.
X
X
 
  • Filter
  • Time
  • Show
Clear All
new posts

  • Files will be sent to ImunifyAV you can change this behavior in settings

    On the latest scan, imunifyAV said a folder of 599 files was infected as a false positive.

    When I click the button to "Add to ignore list and send False Positive" to add these to the ignore list, it says "files will be sent to ImunifyAV team... you can change this behavior in settings."

    I do not see a place to change this in settings. Where is this option to not send files back to imunifyAV?
  • Answer selected by alevchenko at 02-03-2025, 11:46 AM.

    Sorry for misinforming you, I understand your concerns.

    Try disabling the following options in Settings > Malware > General:
    Click image for larger version

Name:	image.png
Views:	6
Size:	13.6 KB
ID:	40478

    Comment


    • #2
      Hi,

      As I understand, you mean the following option:
      Click image for larger version

Name:	ignore-option.png
Views:	7
Size:	21.9 KB
ID:	40469
      Unfortunately, it cannot be changed.​

      This feature has been implemented to allow our developers to analyze the files submitted through the Ignore option. If these files are confirmed as false positives, the existing malware signature database will be updated accordingly. This process ensures that our malware signatures are accurately triggered for genuine malicious files. We would recommend using this option.

      Alternatively, you can use the Ignore List tab which allows ignoring a specific file or a directory:

      Click image for larger version

Name:	add-entry-ignore.png
Views:	6
Size:	33.1 KB
ID:	40470
      Click image for larger version

Name:	add-file-ignore.png
Views:	6
Size:	25.8 KB
ID:	40471​​

      Comment


      • #3
        OK, thanks.

        The message returned that "files will be sent to ImunifyAV team... you can change this behavior in settings." should be eliminated if it's not possible to change this in settings. I thought there must be some other settings page I was not seeing that had that option.

        The false positives in this case were all imagemagic binaries in archive imagemagick directories that had been compiled under one of my hosting accounts. (599 imagemagick binary files)

        I can understand the reasoning behind wanting to see files which are false positives in terms of improving imunify, but I don't like that there isn't a setting for this because I feel submitting all files to another location to ignore them with the ignore button without me checking each one could accidentally violate our privacy policy -- if for example a customer data file or email file were accidentally submitted by clicking the ignore, without their consent.

        Comment


        • #4
          Sorry for misinforming you, I understand your concerns.

          Try disabling the following options in Settings > Malware > General:
          Click image for larger version

Name:	image.png
Views:	6
Size:	13.6 KB
ID:	40478

          Comment

          Working...
          X