Unofficial sigs - why are some blocked, and others 'turned into spam report'

[Damian]

> And here's a part of the log for one that's merely converted to a spam
> report:
> (20911-18) run_av (ClamAV-clamd): /var/spool/amavis/tmp/amavis-20201015T110518-20911-6Oyb0AUP/parts INFECTED: Sanesecurity.Badmacro.Doc.ArrWind1.UNOFFICIAL, Sanesecurity.Badmacro.Doc.ArrWind1.UNOFFICIAL
> (20911-18) Turning AV infection into a spam report: score=0.1, AV:Sanesecurity.Badmacro.Doc.ArrWind1.UNOFFICIAL=0.1
>
> Why is that? What setting controls that?
@virus_name_to_spam_score_maps
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.amavis.org/pipermail/amavis-users/attachments/20201015/304a93ff/attachment.htm>