[clamav-users] Detecting Word docs with macros
eric-list at truenet.com
Mon Dec 10 10:46:46 EST 2018
> Sanesecurity badmacro.ndb and phish.ndb and rogue.hdb will pretty much
> cover a lot of those... MiscreantPunch099-Low.ldb for additional detection
> but can hit scanning performance.
> ClamAV settings in clamd.conf can also be tweaked to block documents with
> macro and or passwords.
Thanks, just added badmacro.ndb, so hopefully that will help.
More information about the clamav-users