> Hello, > clamav found a lot a of my files (ms word doc) infected by "W97M/Story" or > "WM.Cap" viruses. I tried to scan them with NAV and avast! (both with > recent db updates) and none of them was found infected. Is there someone > maintaining W97M/Story and WM.Cap viruses in clamav db? I can send him/her > some files to investigate this issue. Thanks. We don't have a proper mechanism for OLE2 scanning. Because that signatures match compressed data usually they are created only to match a plain ASCII strings. Very often such signatures cause false positive alerts. A real OLE2 stream reader will be implemented in the next month (I do already have its draft) and signatures for macro viruses will be regenerated.
Best regards, Tomasz Kojm -- oo ..... [EMAIL PROTECTED] (\/)\......... http://www.konarski.edu.pl/~zolw \..........._ I nie zapomnij kliknac w brzuszek... //\ /\\ <- C. Amboinensis www.pajacyk.pl ------------------------------------------------------- This SF.net email is sponsored by: SF.net Giveback Program. SourceForge.net hosts over 70,000 Open Source Projects. See the people who have HELPED US provide better services: Click here: http://sourceforge.net/supporters.php _______________________________________________ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users