This plugin is not a replacment for the mail scanning provided by ClamAV®. All this plugin does is try and detect if a message contains a Microsoft executable file so you can score it appropriately.
Simple attachment tests. The test works by checking for 3 possibilities in the message in any application/* or text/* part in the message:
|Area||Test name||Description||Default scores|
||Message includes Microsoft executable program||0.1|
||MIME filename does not match content||0.1|