> Hello,
> clamav found a lot a of my files (ms word doc) infected by "W97M/Story" or 
> "WM.Cap" viruses. I tried to scan them with NAV and avast! (both with 
> recent db updates) and none of them was found infected. Is there someone 
> maintaining W97M/Story and WM.Cap viruses in clamav db? I can send him/her 
> some files to investigate this issue. Thanks.
 
We don't have a proper mechanism for OLE2 scanning. Because that signatures
match compressed data usually they are created only to match a plain ASCII
strings. Very often such signatures cause false positive alerts. A real
OLE2 stream reader will be implemented in the next month (I do already have its
draft) and signatures for macro viruses will be regenerated.

Best regards,
Tomasz Kojm
-- 
      oo    .....       [EMAIL PROTECTED]
     (\/)\.........     http://www.konarski.edu.pl/~zolw
        \..........._   I nie zapomnij kliknac w brzuszek... 
          //\   /\\     <- C. Amboinensis    www.pajacyk.pl        


-------------------------------------------------------
This SF.net email is sponsored by: SF.net Giveback Program.
SourceForge.net hosts over 70,000 Open Source Projects.
See the people who have HELPED US provide better services:
Click here: http://sourceforge.net/supporters.php
_______________________________________________
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users

Reply via email to