<html><head></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 14px; font-family: 'Courier New', sans-serif; "><div><div><div>Yes, but they fixed already.</div><div>Run freshclam again to download the new bytecode and reload your clamd</div><div><br></div><div>Regards,</div><div><div><div><br></div><div>-- </div><div>Fabio De Martin</div></div><div>11-8515-1629</div><div><br></div></div></div></div><div><br></div><span id="OLK_SRC_BODY_SECTION"><div style="font-family:Calibri; font-size:11pt; text-align:left; color:black; BORDER-BOTTOM: medium none; BORDER-LEFT: medium none; PADDING-BOTTOM: 0in; PADDING-LEFT: 0in; PADDING-RIGHT: 0in; BORDER-TOP: #b5c4df 1pt solid; BORDER-RIGHT: medium none; PADDING-TOP: 3pt"><span style="font-weight:bold">From: </span> Eduardo Casarero <<a href="mailto:ecasarero@gmail.com">ecasarero@gmail.com</a>><br><span style="font-weight:bold">Reply-To: </span> MailScanner discussion <<a href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.info</a>><br><span style="font-weight:bold">Date: </span> Friday, May 11, 2012 12:59 PM<br><span style="font-weight:bold">To: </span> MailScanner discussion <<a href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.info</a>><br><span style="font-weight:bold">Subject: </span> problems with clamav and Office attachments<br></div><div><br></div><blockquote id="MAC_OUTLOOK_ATTRIBUTION_BLOCKQUOTE" style="BORDER-LEFT: #b5c4df 5 solid; PADDING:0 0 0 5; MARGIN:0 0 0 5;"><div>Does anybody has this kind of false positives with office attachments?</div><div><br></div>MailScanner[14454]: Clamd::INFECTED:: BC.Exploit.CVE_2012_0184<div><br></div><div>i've started seeing this since clamav updated to this cld version:</div><div><br></div><div>daily.cld is up to date (version: 14911, sigs: 170966, f-level: 63, builder: jesler)</div><div><br></div><div>Regards,</div><div><br></div><div>Eduardo.</div>
--
MailScanner mailing list
<a href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.info</a>
<a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner">http://lists.mailscanner.info/mailman/listinfo/mailscanner</a>
Before posting, read <a href="http://wiki.mailscanner.info/posting">http://wiki.mailscanner.info/posting</a>
Support MailScanner development - buy the book off the website!
</blockquote></span></body></html>