Page 1 of 1

ClamAV ist not scanning Word-Documents

Posted: Wed Jan 12, 2005 6:17 am
by BasicArtStudios
Hi friends,

first of all qmail-scanner is runnig fine on all my systems but i noticed that clamav ist not scanning .doc-Files. I had a file including the Tristate.AA Macro-Virus. But the Mail was delivered untouched by the scanner. Can i configure clamav to scan Office-Documents? The .doc was created on a Mac with M$ Office.
Spamassassin skipped that file, because it was too big for it. Thats ok. But ClamAV told me that it's clean. But that's a failure...
The ClamAV-Database is kept up2date by freshclam of course. I hope it's just a misconfiguration.

Posted: Wed Jan 12, 2005 10:52 am
by scott
You probably want to consult the clamav folks about that one

Yeah, so i did.

Posted: Thu Jan 13, 2005 5:08 am
by BasicArtStudios
They told me to check /etc/clamd.conf for "ScanOLE2" and i sent them the infected file-sample. It should be included in one of the next database updates or Clam-versions.

They did it

Posted: Sun Mar 13, 2005 9:55 am
by BasicArtStudios
The actual relases later than 0.81 support extracting Macros from Word-Documents.