Hi, clamscan doesn't appear to have an option equivalent to the OLE2BlockMacros in clamd.conf for clamdscan.
clamdscan will report Heuristics.OLE2.ContainsMacros FOUND for a file with macros if OLE2BlockMacros is yes but clamscan doesn't appear to be able to do this. clamscan does however have a --heuristic-scan-precedence equivalent to HeuristicScanPrecedence from clamd.conf which controls behaviour of OLE2BlockMacros if file is detected by both Heuristic and real signatures. Is there a way to turn on the OLE2BlockMacros behaviour with clamscan ? -- David Shrimpton Information Technology Services | The University of Queensland _______________________________________________ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml