[clamav-users] clamscan doesn't have a BlockMacros option
David Shrimpton
d.shrimpton at its.uq.edu.au
Wed Feb 10 09:05:17 UTC 2016
Hi,
clamscan doesn't appear to have an option equivalent to the
OLE2BlockMacros in clamd.conf for clamdscan.
clamdscan will report Heuristics.OLE2.ContainsMacros FOUND for a file with macros
if OLE2BlockMacros is yes but clamscan doesn't appear to be able to do this.
clamscan does however have a --heuristic-scan-precedence equivalent
to HeuristicScanPrecedence from clamd.conf which controls behaviour
of OLE2BlockMacros if file is detected by both Heuristic and real signatures.
Is there a way to turn on the OLE2BlockMacros behaviour with clamscan ?
--
David Shrimpton
Information Technology Services | The University of Queensland
More information about the clamav-users
mailing list