[clamav-users] Detecting Word docs with macros

Eric Tykwinski eric-list at truenet.com
Mon Dec 10 09:58:25 EST 2018

Default clam sigs obviously are not catching these, but wondering if anyone
has them included in a third party that rather FP friendly.

I also just tested a yara from here, and it seems to work, but not certain
about FPs from it either.



Anyone have a suggestion?




Eric Tykwinski

TrueNet, Inc.

P: 610-429-8300


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.clamav.net/pipermail/clamav-users/attachments/20181210/3249c646/attachment.html>

More information about the clamav-users mailing list