Re: [clamav-users] Heuristics.OLE2.ContainsMacros false positive

2012-01-26 Thread [Cardiff] Tugdual de LASSAT
 : mercredi 25 janvier 2012 19:00 À : ClamAV users ML Objet : Re: [clamav-users] Heuristics.OLE2.ContainsMacros false positive On Wed, 25 Jan 2012 16:45:09 +0100 [Cardiff] Tugdual de LASSAT tugdual.delas...@cardiff.fr wrote: Hello Tomasz. FYI, did so, and have created ID N°4269, bugzilla report

Re: [clamav-users] Heuristics.OLE2.ContainsMacros false positive

2012-01-26 Thread Tomasz Kojm
On Thu, 26 Jan 2012 11:40:48 +0100 [Cardiff] Tugdual de LASSAT tugdual.delas...@cardiff.fr wrote: Thanks for your return... Can i please ask you some details on the problem ? Signatures erroneous ? Daemon problems ? The lib was also counting OLE2 objects and not just macros. -- oo

[clamav-users] Heuristics.OLE2.ContainsMacros false positive

2012-01-25 Thread [Cardiff] Tugdual de LASSAT
Hello the list.. I have a problem, i wish to submit to your review... We run 4 years discontinuating, an Exim+Clamav mail server solution that ran smoothly to our needs, until recent internal false positive has been signaled... One of our members is trying to send internally an email containing

[clamav-users] Heuristics.OLE2.ContainsMacros false positive

2012-01-25 Thread [Cardiff] Tugdual de LASSAT
Hello the list.. I have a problem, i wish to submit to your review... We run 4 years discontinuating, an Exim+Clamav mail server solution that ran smoothly to our needs, until recent internal false positive has been signaled... One of our members is trying to send internally an email containing

Re: [clamav-users] Heuristics.OLE2.ContainsMacros false positive

2012-01-25 Thread Tomasz Kojm
On Wed, 25 Jan 2012 16:02:56 +0100 [Cardiff] Tugdual de LASSAT tugdual.delas...@cardiff.fr wrote: I do understant that it is the function OLE2ContainsMacros function I activated that is in cause, but aren't signatures used between daemon and clamscan the same ? This option will make ClamAV

Re: [clamav-users] Heuristics.OLE2.ContainsMacros false positive

2012-01-25 Thread Török Edwin
On 01/25/2012 05:02 PM, [Cardiff] Tugdual de LASSAT wrote: Hello the list.. I have a problem, i wish to submit to your review... We run 4 years discontinuating, an Exim+Clamav mail server solution that ran smoothly to our needs, until recent internal false positive has been signaled...

Re: [clamav-users] Heuristics.OLE2.ContainsMacros false positive

2012-01-25 Thread [Cardiff] Tugdual de LASSAT
:12 À : clamav-users@lists.clamav.net Objet : Re: [clamav-users] Heuristics.OLE2.ContainsMacros false positive On Wed, 25 Jan 2012 16:02:56 +0100 [Cardiff] Tugdual de LASSAT tugdual.delas...@cardiff.fr wrote: I do understant that it is the function OLE2ContainsMacros function I activated

Re: [clamav-users] Heuristics.OLE2.ContainsMacros false positive

2012-01-25 Thread Tomasz Kojm
On Wed, 25 Jan 2012 16:16:56 +0100 [Cardiff] Tugdual de LASSAT tugdual.delas...@cardiff.fr wrote: Thanks for your prompt return ... Problem is: 1- That specific powerpoint doesn't use macros (it's a plain slide with no macros in it) 2- An excel file using macros passed detection without

Re: [clamav-users] Heuristics.OLE2.ContainsMacros false positive

2012-01-25 Thread [Cardiff] Tugdual de LASSAT
...@lists.clamav.net [mailto:clamav-users-boun...@lists.clamav.net] De la part de Tomasz Kojm Envoyé : mercredi 25 janvier 2012 16:27 À : ClamAV users ML Objet : Re: [clamav-users] Heuristics.OLE2.ContainsMacros false positive On Wed, 25 Jan 2012 16:16:56 +0100 [Cardiff] Tugdual de LASSAT tugdual.delas

Re: [clamav-users] Heuristics.OLE2.ContainsMacros false positive

2012-01-25 Thread Bowie Bailey
On 1/25/2012 9:48 AM, [Cardiff] Tugdual de LASSAT wrote: Hello the list.. I have a problem, i wish to submit to your review... We run 4 years discontinuating, an Exim+Clamav mail server solution that ran smoothly to our needs, until recent internal false positive has been signaled... One

Re: [clamav-users] Heuristics.OLE2.ContainsMacros false positive

2012-01-25 Thread [Cardiff] Tugdual de LASSAT
Objet : Re: [clamav-users] Heuristics.OLE2.ContainsMacros false positive On 1/25/2012 9:48 AM, [Cardiff] Tugdual de LASSAT wrote: Hello the list.. I have a problem, i wish to submit to your review... We run 4 years discontinuating, an Exim+Clamav mail server solution that ran smoothly to our

Re: [clamav-users] Heuristics.OLE2.ContainsMacros false positive

2012-01-25 Thread Bowie Bailey
On 1/25/2012 11:02 AM, [Cardiff] Tugdual de LASSAT wrote: That one is good: I do get : clamdscan selsia.ppt /root/selsia.ppt: Heuristics.OLE2.ContainsMacros FOUND --- SCAN SUMMARY --- Infected files: 1 Time: 0.001 sec (0 m 0 s) So I must admit there is a problem in

Re: [clamav-users] Heuristics.OLE2.ContainsMacros false positive

2012-01-25 Thread Tomasz Kojm
On Wed, 25 Jan 2012 16:45:09 +0100 [Cardiff] Tugdual de LASSAT tugdual.delas...@cardiff.fr wrote: Hello Tomasz. FYI, did so, and have created ID N°4269, bugzilla report.. Not knowing I enabled severity to blocker (first in list), but please change if estimating it is erroneous.. The problem