Thanks for your prompt return ... Problem is: 1- That specific powerpoint doesn't use macros (it's a plain slide with no macros in it) 2- An excel file using macros passed detection without problems. (visibly allowing me to suspect a signature problem) 3- clamscan declares it free ...
Am I mad ? or is there something I've missed in clamav's functioning ? Thks for any explanation on this... Tugdual de Lassat -----Message d'origine----- De : clamav-users-boun...@lists.clamav.net [mailto:clamav-users-boun...@lists.clamav.net] De la part de Tomasz Kojm Envoyé : mercredi 25 janvier 2012 16:12 À : clamav-users@lists.clamav.net Objet : Re: [clamav-users] Heuristics.OLE2.ContainsMacros false positive On Wed, 25 Jan 2012 16:02:56 +0100 [Cardiff] Tugdual de LASSAT <tugdual.delas...@cardiff.fr> wrote: > I do understant that it is the function OLE2ContainsMacros function I > activated that is in cause, but aren't signatures used between daemon > and clamscan the same ? This option will make ClamAV detect all office documents, which contain macros. In most cases it's not a good idea to enable it. -- oo ..... Tomasz Kojm <tk...@clamav.net> (\/)\......... http://www.ClamAV.net/gpg/tkojm.gpg \..........._ 0DCA5A08407D5288279DB43454822DC8985A444B //\ /\ Wed Jan 25 16:09:29 CET 2012 _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml