[clamav-users] Sigtool parsing issues

David Shrimpton d.shrimpton at its.uq.edu.au
Mon Aug 15 17:47:30 EDT 2016


On Tue, 16 Aug 2016, Jack wrote:

> 
> To note, the document opens fine in Microsoft Word, and oletools has no issues dumping out the macros.

Hi,

I have observed this problem too with files 
that file reports as "Microsoft Word 2007+".

oledump will extract the macros but not sigtool.

clamav appears to still extract the macros and signatures
written against the macro code still work.

-- 
David Shrimpton



More information about the clamav-users mailing list