Hello Jack, > Great, thanks. Here is the output with ‘—debug’: > > LibClamAV debug: Initialized 0.99.2 engine > LibClamAV debug: in cli_ole2_extract() > LibClamAV debug: OLE2 magic failed! > LibClamAV debug: Cleaning up phishcheck > LibClamAV debug: Phishcheck cleaned up > > To note, the document opens fine in Microsoft Word, and oletools has no > issues dumping out the macros.
Maybe related to https://github.com/vrtadmin/clamav-devel/commit/dbd2653d835b5446aed780112d376f5b2596519f See this in the next version of Clamav. -- Best regards, Arnaud Jacques SecuriteInfo.com Facebook : https://www.facebook.com/pages/SecuriteInfocom/132872523492286 Twitter : @SecuriteInfoCom _______________________________________________ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml