On Wed, October 5, 2016 1:21 pm, Alex wrote: > Hi, > I'm starting to receive emails like this: > > > http://pastebin.com/HpvEcT9K > > > They're not being caught by clamav or other virus filters. Is it even > possible to catch encrypted Word docs with a virus scanner? > Sorry this is brief, still generating sigs but...
badmacro.ndb: Sanesecurity.Badmacro.Doc.CryptDoc.v1 now detecting them. -- Cheers, Steve Twitter: @sanesecurity _______________________________________________ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml
