[clamav-users] Detecting Word docs with macros

Eric Tykwinski eric-list at truenet.com
Mon Dec 10 15:46:46 UTC 2018


> Sanesecurity badmacro.ndb and phish.ndb and rogue.hdb will pretty much
> cover a lot of those... MiscreantPunch099-Low.ldb for additional detection
> but can hit scanning performance.
> ClamAV settings in clamd.conf can also be tweaked to block documents with
> macro and or passwords.

Thanks, just added badmacro.ndb, so hopefully that will help.


Eric Tykwinski
TrueNet, Inc.
P: 610-429-8300

More information about the clamav-users mailing list