[clamav-users] Understanding OLE2BlockMacros

Steve Basford steveb_clamav at sanesecurity.com
Thu Aug 25 16:32:10 EDT 2016

On Thu, August 25, 2016 9:20 pm, Dennis Peterson wrote:

>> I think the issue is that he wants to block recognized viruses, but
>> only mark heuristic matches.
> That would be a scoring task in Amavisd.


#     [ qr’^’^Heuristics\.OLE2\.ContainsMacros’  => 0.1 ],

So, allocate a score and deliver

use HeuristicScanPrecedence as indicated in earlier post


Web : sanesecurity.com
Twitter: @sanesecurity

More information about the clamav-users mailing list