ClamAV marked spamassassin plugin OLEVBMacro.pm

Question

ClamAV marked spamassassin plugin OLEVBMacro.pm as malware. I checked the plugin on Virus total, so ClamAV and ESTsecurity marked Malicious. Plugin on github

ClamAV react to this line

my $mhtml_marker2 = "^mhtml:https?://";

Any ideas?

Answer 1

You have the option to include exclude paths in either the clamd.conf or scan.conf files within the ClamAV configuration settings.

ExcludePath ^/usr/local/share/perl5/Mail/SpamAssassin/Plugin
ExcludePath ^/usr/share/perl5/Mail/SpamAssassin/Plugin
ExcludePath ^/path/to/OLEVBMacro.pm