[clamav-users] Detection glitch on series of Excel files

[Petr Jurášek]

Hi,

same situation for me. Debian 10 buster:

    # clamscan --version
    ClamAV 0.103.5/26495/Mon Mar 28 10:19:21 2022

running clamscan:

    # clamscan /var/tmp/Money_transfer_details.xls
    /var/tmp/Money_transfer_details.xls:
    SecuriteInfo.com.Macro.Downlader-14.UNOFFICIAL FOUND
    /var/tmp/Money_transfer_details.xls: OK

    ----------- SCAN SUMMARY -----------
    Known viruses: 12652261
    Engine version: 0.103.5
    Scanned directories: 0
    Scanned files: 1
    Infected files: 0
    Data scanned: 0.11 MB
    Data read: 0.05 MB (ratio 1.93:1)
    Time: 25.152 sec (0 m 25 s)
    Start Date: 2022:03:28 15:28:06
    End Date:   2022:03:28 15:28:31


with --allmatch:

    # clamscan --allmatch /var/tmp/Money_transfer_details.xls
    /var/tmp/Money_transfer_details.xls:
    SecuriteInfo.com.Macro.Downlader-14.UNOFFICIAL FOUND
    ...
    ----------- SCAN SUMMARY -----------
    Known viruses: 12652261
    Engine version: 0.103.5
    Scanned directories: 0
    Scanned files: 1
    Infected files: 1
    Data scanned: 0.16 MB
    Data read: 0.05 MB (ratio 2.86:1)
    Time: 24.959 sec (0 m 24 s)
    Start Date: 2022:03:28 15:29:15
    End Date:   2022:03:28 15:29:40


Regards,
Petr Jurasek
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.clamav.net/pipermail/clamav-users/attachments/20220328/90845a5b/attachment.htm>