Hi, I found exefilter, a tool to extract macros from OLE (.doc, .xls, .ppt, etc.) files. Does anyone has any experience with it? I was getting a macro virus thru, so I blocked all OLE Macros via Clamd, but I know that I'm going to get false positives. It can be integrated with clam, but I would rather us it with amavis so I have all the filters in the same place.
This is the homepage: https://github.com/decalage2/exefilter Thanks in advance, -- Diego.
