Hi all,
These targeted macro viruses are killing us. I hoped someone would
like to take a shot at suggestions on how to stop these.
http://pastebin.com/FTzbQcHb
The Heuristics.OLE2.ContainsMacros rule is added by amavisd+clamav,
but it's apparently not something that spamassassin can manipulate
Alex,
>> What is the name of the plugin you're referring to? It's not PDFInfo,
>> correct?
It's called Pdf.pm (note the unusual capitalization) or PDFassassin and
starts with something saying:
# PDF scan, inspired by Ocr.pm
# For more details see
# http://blog.atmail.com/?p=61
I cannot remem