Quarantine doc Files only with Macros?
postmaster at wf-partner.com
postmaster at wf-partner.com
Fri Feb 24 08:08:01 CET 2017
I turned on "OLE2BlockMacros true", but a word file containing a macro
virus was not classified as "INFECTED". I had renamed the file before
sending a test mail.
Any ideas what could I do to get all files with macros to be
quarantined?
Kind regards
Thomas
-----Original Message-----
> From: amavis-users
> [mailto:amavis-users-bounces+dino.edwards=mydirectmail.net at amavis.org]
> On Behalf Of Hoyer-Reuther, Christian Christian.Hoyer-Reuther at
> cac-chem.de wrote
> Sent: Wednesday, December 14, 2016 11:42 AM
> To: amavis-users at amavis.org
> Subject: Quarantine doc Files only with Macros?
>
> Hello Klaus,
>
> if you use ClamAV, then you can set it's option "OLE2BlockMacros true".
> This detects MS
> Office Macros regardless of the file extension. If a macro is found,
> then the file is
> classified as a virus ("INFECTED: Heuristics.OLE2.ContainsMacros").
>
> Regards,
>
> Christian
More information about the amavis-users
mailing list