Antivirus

This plugin is not a replacment for the mail scanning provided by ClamAV®. All this plugin does is try and detect if a message contains a Microsoft executable file so you can score it appropriately.

Simple attachment tests. The test works by checking for 3 possibilities in the message in any application/* or text/* part in the message:

  • in text parts, look for a uuencoded executable start string
  • in application parts, look for filenames ending in an executable extension
  • in application parts, look for a base64 encoded executable start string

Tests

Area Test name Description Default scores
body MICROSOFT_EXECUTABLE Message includes Microsoft executable program 0.1
body MIME_SUSPECT_NAME MIME filename does not match content 0.1

Related Pages