[clamav-users] ScanOLE2 yes disables macro virus detection

Steve Basford steveb_clamav at sanesecurity.com
Mon Feb 8 16:01:34 UTC 2016


On Mon, February 8, 2016 3:48 pm, David Shrimpton wrote:
> Hi Steve,
>
>
> When I remove all my local database files problem goes away.
> So problem appears to be in a local database.
>
Ah ok...

> BAD_SIGNATURE.ldb.macro.19;Target:2;1;41747472;0:(0)/./ri

For info, I've used this against my *ham* folder full good word/excel
macro docs and it hits a few of them :(

Cheers,

Steve
Web : sanesecurity.com
Blog: sanesecurity.blogspot.com
Twitter: @sanesecurity




More information about the clamav-users mailing list