That one is good: I do get : clamdscan selsia.ppt /root/selsia.ppt: Heuristics.OLE2.ContainsMacros FOUND
----------- SCAN SUMMARY ----------- Infected files: 1 Time: 0.001 sec (0 m 0 s) So I must admit there is a problem in clamscan result that differs... Nevertheless I do not have any macros in this file... Still weird on this false positive... Tugdual de Lassat -----Message d'origine----- De : clamav-users-boun...@lists.clamav.net [mailto:clamav-users-boun...@lists.clamav.net] De la part de Bowie Bailey Envoyé : mercredi 25 janvier 2012 16:55 À : clamav-users@lists.clamav.net Objet : Re: [clamav-users] Heuristics.OLE2.ContainsMacros false positive On 1/25/2012 9:48 AM, [Cardiff] Tugdual de LASSAT wrote: > Hello the list.. > > I have a problem, i wish to submit to your review... > We run 4 years discontinuating, an Exim+Clamav mail server solution > that ran smoothly to our needs, until recent internal false positive > has been signaled... > > One of our members is trying to send internally an email containing a > powerpoint that is virus free (check with 3 antivirus), and that I > have checked through clamav on the machine that detects it as virus.. > Result of clamscan is eloquent : > > #clamscan selsia.ppt > selsia.ppt: OK Try checking with clamdscan so you are scanning with the daemon rather than starting a new clam process that may have different settings. # clamdscan selsia.ppt -- Bowie _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
