Re: [clamav-users] False negative.

2016-08-23 Thread G.W. Haywood
Hi Steve, On Mon, 22 Aug 2016, Steve Basford wrote: 3rd Party sigs: phish.ndb, foxhole_filename.cdb, foxhole_generic.cdb, foxhole_js.cdb can usually block these script type nasties. We've been using phish.ndb for some years. The version used to scan the message was last updated on 18th Augus

[clamav-users] Understanding OLE2BlockMacros

2016-08-23 Thread Alex
Hi, I'm using clamav on fedora23 with amavisd-new and would like to tag each email that contains macros with Heuristics.OLE2.ContainsMacros. I've enabled OLE2BlockMacros, but it appears it actually lets them through instead of blocking them outright when this setting is made. What is the proper c