Re: [clamav-users] No notice of OLE2.ContainsMacros

2016-12-20 Thread Reindl Harald
Am 21.12.2016 um 01:32 schrieb Mark Foley: I did not know about clamdscan! Thanks for that info. I've replaced clamscan with clamdscan in my script for 2 reasons: First, while clamscan with the --block-macros=yes switch did work for .doc[x|m] quarantined messaged, it found macro enabled .xls fi

Re: [clamav-users] No notice of OLE2.ContainsMacros

2016-12-20 Thread Mark Foley
On Tue, 20 Dec 2016 17:26:10 "G.W. Haywood" wrote: > To: clamav-users@lists.clamav.net > Subject: Re: [clamav-users] No notice of OLE2.ContainsMacros > > On Tue, 20 Dec 2016, Mark Foley wrote: > > > ... running clamscan --block-macros=yes does find the > >

Re: [clamav-users] No notice of OLE2.ContainsMacros

2016-12-20 Thread G.W. Haywood
Hi there, On Tue, 20 Dec 2016, Mark Foley wrote: ... running clamscan --block-macros=yes does find the "ContainsMacros" notice. ... (if I specify --block-macros=yes, apparently the settings in /usr/local/etc/clamd.conf aren't used). Check the documentation. The settings in clamd.conf are fo

Re: [clamav-users] No notice of OLE2.ContainsMacros

2016-12-19 Thread Mark Foley
amAV users ML Subject: Re: [clamav-users] No notice of OLE2.ContainsMacros > $ clamscan -a -v -z --block-macros=yes /var/spool/mqueue/dfuBJBh64e020058 > Scanning /var/spool/mqueue/dfuBJBh64e020058 > /var/spool/mqueue/dfuBJBh64e020058: OK The dfuBJBh64e020058 file looks like a sendmail qu

Re: [clamav-users] No notice of OLE2.ContainsMacros

2016-12-19 Thread David Shrimpton
> $ clamscan -a -v -z --block-macros=yes /var/spool/mqueue/dfuBJBh64e020058 > Scanning /var/spool/mqueue/dfuBJBh64e020058 > /var/spool/mqueue/dfuBJBh64e020058: OK The dfuBJBh64e020058 file looks like a sendmail queue datafile, in which case it would have no email headers and contain only mime enc

Re: [clamav-users] No notice of OLE2.ContainsMacros [OT]

2016-12-19 Thread Matteo Dessalvi
confusing! I suppose if I hadn't changed the subject line back to my original subject my reply might have unsubscribed be as well. Thanks for the clarification. --Mark -Original Message- To: From: Matteo Dessalvi Date: Mon, 19 Dec 2016 16:15:37 +0100 Subject: Re: [clamav-users] No

Re: [clamav-users] No notice of OLE2.ContainsMacros [OT]

2016-12-19 Thread Mark Foley
ubject: Re: [clamav-users] No notice of OLE2.ContainsMacros [OT] Mark, I believe it was not a suggestion. It often happens here that a user which want to unsubscribe {him,her}self from the ClamAV mailing list just reply to whatever message is crossing the list, asking to be 'unsubscribed'. Best

Re: [clamav-users] No notice of OLE2.ContainsMacros [OT]

2016-12-19 Thread Matteo Dessalvi
Mark, I believe it was not a suggestion. It often happens here that a user which want to unsubscribe {him,her}self from the ClamAV mailing list just reply to whatever message is crossing the list, asking to be 'unsubscribed'. Best regards, Matteo On 12/19/2016 04:05 PM, Mark Foley wrote: Ple

[clamav-users] No notice of OLE2.ContainsMacros

2016-12-19 Thread Mark Foley
--Original Message- From: "Mark Foley" Sent: Monday, December 19, 2016 8:36am To: clamav-users@lists.clamav.net Subject: [clamav-users] No notice of OLE2.ContainsMacros Before I submit a bug report on this, I thought I'd see if any list members have ideas. I'm runnin

[clamav-users] No notice of OLE2.ContainsMacros

2016-12-19 Thread Mark Foley
Before I submit a bug report on this, I thought I'd see if any list members have ideas. I'm running clamav 0.99.2 on Linux Slackware64 14.1. I'm running clamav-milter for sendmail. I have "OLE2BlockMacros yes" set in /usr/local/etc/clamd.conf. This is working fine, I get: fd[10]: Heuristics.OL