Sadly it's not as effective as I was hoping, I may code up the other one that's going on in the thread "Word Macro warning in subject." and just drop anything with macro's (harsh, but an evil worth having I think!)
I haven't tried any of the unofficial clam sigs, although I did think about coding a few myself around > my $marker1 = "\xd0\xcf\x11\xe0"; > my $marker2 = "\x00\x41\x74\x74\x72\x69\x62\x75\x74\x00"; But I thought it might be too wide lol! -----Original Message----- From: MIMEDefang [mailto:[email protected]] On Behalf Of Nels Lindquist Sent: 12 February 2016 16:30 To: [email protected] Subject: Re: [Mimedefang] Installed FPScan and it's just hanging and then timing out. On 2/4/2016 1:22 PM, [email protected] wrote: > I’ve been using mimedefang with clamscan (and a few others like > Kavscanner etc) for many years as the basis for my mail system. > Recently, I started receiving a lot of the empty msoffice documents > with macro viruses, which clamscan doesn’t detect at all. So I decided > to grab a licence for fpscan. (Oh I was using 2.73 and hve updated to > 2.78 with no differences) Out of curiosity, did you try any of the "unofficial sigs" for ClamAV? I'm curious to see whether F-Prot offers any improvement with the macro virus issues. ---- Nels Lindquist _______________________________________________ NOTE: If there is a disclaimer or other legal boilerplate in the above message, it is NULL AND VOID. You may ignore it. Visit http://www.mimedefang.org and http://www.roaringpenguin.com MIMEDefang mailing list [email protected] http://lists.roaringpenguin.com/mailman/listinfo/mimedefang This Email Has Been Anti-Virus Scanned _______________________________________________ NOTE: If there is a disclaimer or other legal boilerplate in the above message, it is NULL AND VOID. You may ignore it. Visit http://www.mimedefang.org and http://www.roaringpenguin.com MIMEDefang mailing list [email protected] http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
