Hello Klaus,
if you use ClamAV, then you can set it's option "OLE2BlockMacros true". This
detects MS Office Macros regardless of the file extension. If a macro is found,
then the file is classified as a virus ("INFECTED:
Heuristics.OLE2.ContainsMacros").
Regards,
Christian
> -----Original Message-----
> From: amavis-users [mailto:amavis-users-bounces+christian.hoyer-reuther=cac-
> [email protected]] On Behalf Of Klaus Steinberger
> Sent: Wednesday, December 14, 2016 11:17 AM
> To: [email protected]
> Subject: Quarantine doc Files only with Macros?
>
> Hi,
>
> is there a way to quarantine office files (excel, doc etc.) but only if the
> contain macros?
>
> Sincerly,
> Klaus
