[clamav-users] clamscan doesn't have a BlockMacros option

David Shrimpton d.shrimpton at its.uq.edu.au
Wed Feb 10 09:05:17 UTC 2016


Hi,

clamscan doesn't appear to have an option equivalent to the
OLE2BlockMacros in clamd.conf for clamdscan.

clamdscan will report Heuristics.OLE2.ContainsMacros FOUND for a file with macros
if OLE2BlockMacros is yes but clamscan doesn't appear to be able to do this. 

clamscan does however have a --heuristic-scan-precedence equivalent
to HeuristicScanPrecedence from clamd.conf which controls behaviour
of OLE2BlockMacros if file is detected by both Heuristic and real signatures.

Is there a way to turn on the OLE2BlockMacros behaviour with clamscan ?

-- 
David Shrimpton
Information Technology Services | The University of Queensland



More information about the clamav-users mailing list