Maybe it is good idea to separate macro viruses into different file? Sincerely yours, Roman A.Suzi -- - Petrozavodsk - Karelia - Russia - mailto:[EMAIL PROTECTED] -
On Thu, 9 Oct 2003, Tomasz Kojm wrote: > > Hello, > > clamav found a lot a of my files (ms word doc) infected by "W97M/Story" or > > "WM.Cap" viruses. I tried to scan them with NAV and avast! (both with > > recent db updates) and none of them was found infected. Is there someone > > maintaining W97M/Story and WM.Cap viruses in clamav db? I can send him/her > > some files to investigate this issue. Thanks. > > We don't have a proper mechanism for OLE2 scanning. Because that signatures > match compressed data usually they are created only to match a plain ASCII > strings. Very often such signatures cause false positive alerts. A real > OLE2 stream reader will be implemented in the next month (I do already have its > draft) and signatures for macro viruses will be regenerated. > > Best regards, > Tomasz Kojm > -- > oo ..... [EMAIL PROTECTED] > (\/)\......... http://www.konarski.edu.pl/~zolw > \..........._ I nie zapomnij kliknac w brzuszek... > //\ /\\ <- C. Amboinensis www.pajacyk.pl > > > ------------------------------------------------------- > This SF.net email is sponsored by: SF.net Giveback Program. > SourceForge.net hosts over 70,000 Open Source Projects. > See the people who have HELPED US provide better services: > Click here: http://sourceforge.net/supporters.php > _______________________________________________ > Clamav-users mailing list > [EMAIL PROTECTED] > https://lists.sourceforge.net/lists/listinfo/clamav-users > ------------------------------------------------------- This SF.net email is sponsored by: SF.net Giveback Program. SourceForge.net hosts over 70,000 Open Source Projects. See the people who have HELPED US provide better services: Click here: http://sourceforge.net/supporters.php _______________________________________________ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
