Quarantine doc Files only with Macros?

[Hoyer-Reuther, Christian]

Hello Klaus,

if you use ClamAV, then you can set it's option "OLE2BlockMacros true". This detects MS Office Macros regardless of the file extension. If a macro is found, then the file is classified as a virus ("INFECTED: Heuristics.OLE2.ContainsMacros").

Regards,

Christian

> -----Original Message-----
> From: amavis-users [mailto:amavis-users-bounces+christian.hoyer-reuther=cac-
> chem.de at amavis.org] On Behalf Of Klaus Steinberger
> Sent: Wednesday, December 14, 2016 11:17 AM
> To: amavis-users at amavis.org
> Subject: Quarantine doc Files only with Macros?
> 
> Hi,
> 
> is there a way to quarantine office files (excel, doc etc.) but only if the
> contain macros?
> 
> Sincerly,
> Klaus