---
name: "Mail::SpamAssassin::Plugin::AntiVirus"
section: "3pm"
platform: "linux"
package: "spamassassin"
version: "4.0.2-3"
release: "Arch Linux 2026-11-01"
platforms: ["linux"]
url: "https://new.carta.tech/Mail::SpamAssassin::Plugin::AntiVirus"
---

# Mail::SpamAssassin::Plugin::AntiVirus(3pm)

simple anti-virus tests

## NAME

AntiVirus - simple anti-virus tests

## SYNOPSIS

```
  loadplugin     Mail::SpamAssassin::Plugin::AntiVirus
  body MICROSOFT_EXECUTABLE eval:check_microsoft_executable()
  body MIME_SUSPECT_NAME    eval:check_suspect_name()
```

## DESCRIPTION

The MICROSOFT\_EXECUTABLE rule works by checking for 3 possibilities in the message in any application/\* or text/\* part in the message:

- \- in text parts, look for a uuencoded executable start string

  - \- in application parts, look for filenames ending in an executable extension

  - \- in application parts, look for a base64 encoded executable start string