[clamav-users] Encrypted Word doc/phishing attack

[Joel Esler (jesler)]

Alex,

Are you submitting these files to ClamAV?

http://www.clamav.net/reports/malware

--
Joel


> On Oct 5, 2016, at 8:21 AM, Alex <mysqlstudent at gmail.com> wrote:
> 
> Hi,
> I'm starting to receive emails like this:
> 
> http://pastebin.com/HpvEcT9K
> 
> They're not being caught by clamav or other virus filters. Is it even
> possible to catch encrypted Word docs with a virus scanner?
> 
> I'm using spamassassin on fedora with amavisd. Is there something that
> can be done to at least tag them in some way so the end-user knows
> it's a potential threat?
> 
> Thanks,
> Alex
> _______________________________________________
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
> 
> http://www.clamav.net/contact.html#ml