Virus quarantine empty

Plamen Trifonov

New Member
Mar 14, 2019
Dear all,
A non-typical issue has risen with our pmg: there are emails that the tracking center claims that are quarantined in virus quarantine, but the virus quarantine is empty for weeks. The problem seems to rose when I updated to the newest 5.2-3 build.

As an attachment to this post you will find a screenshot of the virus detector settings and the action rules.


  • Screenshot_1.png
    5.4 KB · Views: 16
  • Screenshot_2.png
    27.1 KB · Views: 16
  • Screenshot_3.png
    22.3 KB · Views: 16
Hm - that's odd - nothing in particular changed that should affect that...

Could I ask you for:
* The log for the mail in question
* a screen-shot of the virus-quarantine

keep in mind that the virus-quarantine is only accessible by an Administrator and that it's separate from the Spamquarantine where each user can unblock their mails

Please accept my sincere apologies.

I forgot that I've tried to add an exception for clamav signature by creating a .ign2 database file in /var/lib/clamav. The signatures that I would like to exclude are: YARA.maldoc_getEIP_method_1.UNOFFICIAL and YARA.maldoc_indirect_function_call_3.UNOFFICIAL and my mistake was that I've added them with the .UNOFFICIAL extension. After removing the extension and restart clamav daemon the PMG virus quarantine populated, but the problem with the false positives of those signature persists - the whitelist.ign2 file doesn't seem to work.

Can you advice how to add exceptions for those signatures, because I've worked around the problem by commenting the whole rules in their native .yar rules database file?

Kind regards,


The Proxmox community has been around for many years and offers help and support for Proxmox VE, Proxmox Backup Server, and Proxmox Mail Gateway.
We think our community is one of the best thanks to people like you!

Get your subscription!

The Proxmox team works very hard to make sure you are running the best software and getting stable updates and security enhancements, as well as quick enterprise support. Tens of thousands of happy customers have a Proxmox subscription. Get yours easily in our online shop.

Buy now!