---
title: Antivirus
url: 'https://docs.danami.com/warden/user-guide/antispam-plugins/antivirus'
markdown: 'https://docs.danami.com/warden/user-guide/antispam-plugins/antivirus.md'
date: '2026-09-25'
description: 'This plugin is not a replacment for the mail scanning provided by ClamAV®. All this plugin does is try and detect if a message contains a Microsoft executable file so you can score it appropriately. Simple attachment tests. The test works by checking for 3 possibilities in the message in…'
taxonomy:
  category:
    - docs
  tag:
    - antivirus
---

[](#)  [ Basics ](https://docs.danami.com/warden/)     [ User Guide ](https://docs.danami.com/warden/user-guide)     [ Anti-spam Plugins ](https://docs.danami.com/warden/user-guide/antispam-plugins)      Antivirus    

# Antivirus

> > > > > This plugin is not a replacment for the mail scanning provided by ClamAV®. All this plugin does is try and detect if a message contains a Microsoft executable file so you can score it appropriately.

Simple attachment tests. The test works by checking for 3 possibilities in the message in any application/\* or text/\* part in the message:

- in text parts, look for a uuencoded executable start string
- in application parts, look for filenames ending in an executable extension
- in application parts, look for a base64 encoded executable start string

## Rules

| Area | Rule name | Description | Default scores |
|---|---|---|---|
| body | `MICROSOFT_EXECUTABLE` | Message includes Microsoft executable program | 0.1 |
| body | `MIME_SUSPECT_NAME` | MIME filename does not match content | 0.1 |

## Related Pages

- [Scanning Settings](https://docs.danami.com/warden/settings/antivirus/scanning-settings "Scanning Settings")
- [Scanning Limits](https://docs.danami.com/warden/settings/antivirus/scanning-limits "Scanning Limits")
- [Anti-virus](https://docs.danami.com/warden/user-guide/antivirus "Anti-virus")

 [](https://docs.danami.com/warden/user-guide/antivirus)

---

## Navigation

- Parent: [Anti-spam Plugins](https://docs.danami.com/warden/user-guide/antispam-plugins.md)
- Previous: [Abusix](https://docs.danami.com/warden/user-guide/antispam-plugins/abusix.md)
- Next: [ASN](https://docs.danami.com/warden/user-guide/antispam-plugins/asn.md)