Clamd does not detect all Makros.

[Steve Basford]

On Wed, November 9, 2016 9:51 am, Heino Backhaus wrote:
> Hi,
>
>
> again a Virus (Worddocument-Virus) made it's way through a clamav with
>
> OLE2BlockMacros yes
> in /etc/clamd.conf

> what are you doing to block those kind of viruses?

a) There's already a bugzilla entry if you want to add a sample:

https://bugs.clamav.net/show_bug.cgi?id=11651

b) 3rd party badmacro.ndb / phish.ndb / rogue.hdb  may be able to help

-- 
Cheers,

Steve
Twitter: @sanesecurity