Re: [clamav-users] password protected encrypted .docx files

2017-11-15 Thread Mark Foley
OK, I've found something. Encrypted .docx files contain the following strings: http://schemas.microsoft.com/office/2006/encryption"; xmlns:p="http://schemas.microsoft.com/office/2006/keyEncryptor/password";> > >>> scripts and > > >>> execute .exe files. > > >>> > > >>> I'd like to block encrypt

Re: [clamav-users] password protected encrypted .docx files

2017-11-15 Thread Mark Foley
On Wed, 15 Nov 2017 18:37:36 +0100 (CET) Kees Theunissen wrote: > > On Wed, 15 Nov 2017, Mark Foley wrote: > > >On Wed 15 Nov 2017 01:14:00 -0800 Al Varnell wrote: > > > >>On Tue, Nov 14, 2017 at 07:45 AM, Mark Foley wrote: > >>> I found this older message in the archives. I'm receiving a lot o

Re: [clamav-users] password protected encrypted .docx files

2017-11-15 Thread Kees Theunissen
On Wed, 15 Nov 2017, Mark Foley wrote: >On Wed 15 Nov 2017 01:14:00 -0800 Al Varnell wrote: > >>On Tue, Nov 14, 2017 at 07:45 AM, Mark Foley wrote: >>> I found this older message in the archives. I'm receiving a lot of fake >>> "Invoice" messages with attached encrypted .doc files that run VB scr

Re: [clamav-users] password protected encrypted .docx files

2017-11-15 Thread Mark Foley
.2017 um 21:08 schrieb Dino Edwards: >>>> Didn't realize the ArchiveblockEncrypted included MS Word files. I thought >>>> it would be for password protected zip rar and such >>>> >>>> -Original Message- >>>> From: clamav-user

Re: [clamav-users] password protected encrypted .docx files

2017-11-15 Thread Al Varnell
> Didn't realize the ArchiveblockEncrypted included MS Word files. I thought >>> it would be for password protected zip rar and such >>> >>> -Original Message- >>> From: clamav-users [mailto:clamav-users-boun...@lists.clamav.net >>> <

Re: [clamav-users] password protected encrypted .docx files

2017-11-14 Thread Mark Foley
> From: clamav-users [mailto:clamav-users-boun...@lists.clamav.net] On Behalf > > Of Benny Pedersen > > Sent: Wednesday, April 5, 2017 11:22 AM > > To: clamav-users@lists.clamav.net > > Subject: Re: [clamav-users] password protected encrypted .docx files > > &

Re: [clamav-users] password protected encrypted .docx files

2017-04-05 Thread Reindl Harald
-boun...@lists.clamav.net] On Behalf Of Benny Pedersen Sent: Wednesday, April 5, 2017 11:22 AM To: clamav-users@lists.clamav.net Subject: Re: [clamav-users] password protected encrypted .docx files Dino Edwards skrev den 2017-04-05 16:48: Any way to get clamav to block password protected Microsoft word files?

Re: [clamav-users] password protected encrypted .docx files

2017-04-05 Thread Dino Edwards
AM To: clamav-users@lists.clamav.net Subject: Re: [clamav-users] password protected encrypted .docx files Dino Edwards skrev den 2017-04-05 16:48: > Any way to get clamav to block password protected Microsoft word files? Yes, it is - you can turn ArchiveBlockEncrypted off in clamd.conf (it's of

Re: [clamav-users] password protected encrypted .docx files

2017-04-05 Thread Benny Pedersen
Dino Edwards skrev den 2017-04-05 16:48: Any way to get clamav to block password protected Microsoft word files? Yes, it is - you can turn ArchiveBlockEncrypted off in clamd.conf (it's off by default) if not working pastebin your clamconf (clamav section only) _

[clamav-users] password protected encrypted .docx files

2017-04-05 Thread Dino Edwards
Any way to get clamav to block password protected Microsoft word files? Thanks ___ clamav-users mailing list clamav-users@lists.clamav.net http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users Help us build a comprehensive ClamAV guide: https