Going through the debug output since the last crash, I see about 20 errors
where a VBA scan dir failed on a "can't open". It seems to be in the same
context as when the last crash occurred. Here is an example:
LibClamAV debug: Recognized OLE2 container file
LibClamAV debug: in cli_scanole2()
LibClamAV debug: in cli_ole2_extract()
LibClamAV debug: mmap'ed file
LibClamAV debug:
Magic: 0xLibClamAV debug: d0LibClamAV debug: cfLibClamAV debug:
11LibClamAV debug: e0LibClamAV debug: a1LibClamAV debug: b1LibClamAV debug:
1aLibClamAV debug: e1LibClamAV debug:
LibClamAV debug: CLSID: {LibClamAV debug: 0 LibClamAV debug: 0
LibClamAV debug: 0 LibClamAV debug: 0 LibClamAV debug: 0 LibClamAV debug: 0 LibClamAV
debug: 0 LibClamAV debug: 0 LibClamAV debug: 0 LibClamAV debug: 0 LibClamAV debug: 0
LibClamAV debug: 0 LibClamAV debug: 0 LibClamAV debug: 0 LibClamAV debug: 0 LibClamAV
debug: 0 LibClamAV debug: }
LibClamAV debug: Minor version: 0x3e
LibClamAV debug: DLL version: 0x3
LibClamAV debug: Byte Order: -2
LibClamAV debug: Big Block Size: 9
LibClamAV debug: Small Block Size: 6
LibClamAV debug: BAT count: 2
LibClamAV debug: Prop start: 212
LibClamAV debug: SBAT cutoff: 4096
LibClamAV debug: SBat start: -2
LibClamAV debug: SBat block count: 0
LibClamAV debug: XBat start: -2
LibClamAV debug: XBat block count: 0
LibClamAV debug: Root EntryLibClamAV debug: [root]LibClamAV
debug: bLibClamAV debug: 0 0
LibClamAV debug: _5_SummaryInformationLibClamAV debug: [file]LibClamAV
debug: bLibClamAV debug: 4096 0
LibClamAV debug: WorkbookLibClamAV debug: [file]LibClamAV
debug: bLibClamAV debug: 99316 0
LibClamAV debug: _5_DocumentSummaryInformationLibClamAV debug: [file]LibClamAV
debug: bLibClamAV debug: 4096 0
LibClamAV debug: VBA scan dir: /tmp/clamav/clamav-d3a98e07086bc832
LibClamAV debug: in vba56_dir_read()
LibClamAV debug: Can't open /tmp/clamav/clamav-d3a98e07086bc832/_VBA_PROJECT
LibClamAV debug: Open WordDocument failed
==========================================================
Chris Candreva -- [EMAIL PROTECTED] -- (914) 967-7816
WestNet Internet Services of Westchester
http://www.westnet.com/
-------------------------------------------------------
This SF.Net email sponsored by Black Hat Briefings & Training.
Attend Black Hat Briefings & Training, Las Vegas July 24-29 -
digital self defense, top technical experts, no vendor pitches,
unmatched networking opportunities. Visit www.blackhat.com
_______________________________________________
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users
