Video Screencast Help
Protect Your POS Environment Against Retail Data Breaches. Learn More.

Detection of macros

Created: 18 Sep 2012 • Updated: 18 Dec 2012 | 1 comment

Hello,

I installed Symantec Scan Engine and wrote small application by using SymJavaAPI. This application sends file to scan and server sends back a result of the test.

Symantec is able to detect macro virus in xls file, but if file contains uninfected macro, results of scan is "CLEAN" and I can't detect from result, that file contains macro.

Is possible to configure Symantec to notify me when file contains uninfected macro?

Source code is attached

Thank you for your answers

Comments 1 CommentJump to latest comment

Alex_CST's picture

Scan engine is digital, its either infected or it isnt.  It doesn't matter if its a clean file with a macro all the scan engine cares about is that it's not infected.  So it would have to be done in the connector rather than any reconfiguring of the scan engine itself, if that's possible?

Please mark posts as solutions if they solve your problem!

http://www.cstl.com