Gianluigi Tiesi wrote:
I may get annoying but cabextract utility (clamav has also code in
mspacK) detects and correctly uncompress files using correct names.
I'm looking at the code to see if it will be easy to distinguish from
cab and real ole containers (like ms office)
Bye
vba_extract code can be made a bit smarter
extracted files have magic header
WordDocument magic:
ec a5 c1 00
_VBA_PROJECT magic:
cc 61 5e 00 [00 01 00 ff]
--
Gianluigi Tiesi <[EMAIL PROTECTED]>
EDP Project Leader
Netfarm S.r.l. - http://www.netfarm.it/
Free Software: http://oss.netfarm.it/
_______________________________________________
http://lurker.clamav.net/list/clamav-devel.html