detect executables embedded inside MS Office documents?

[Furnish, Trever G]

> -----Original Message-----
> From: mailscanner-bounces at lists.mailscanner.info 
> [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf 
> Of Julian Field
> Sent: Sunday, April 06, 2008 11:09 AM
> To: MailScanner discussion
> Subject: Re: detect executables embedded inside MS Office documents?
> 
> Ignore all previous requests for information. I've got enough 
> of it, pretty much.
> The only thing I cannot handle is inserted OLE "Packages" 
> that contain multiple files. If someone fancies creating one 
> of those and sending it to me, I'll improve the Package 
> parser to cope with it.
> 
> But it now works with files inserted into Microsoft Office 
> documents just fine.
> 
> This will be in the next release.
> I guess it's a fairly major new feature, the ability to 
> extract embedded files from Microsoft Office documents.
> :-)
> 
> I think I'm going to have a rest now...
> 
> Jules.


Wow!  I didn't really expect much response on that request!  Thank you
very much!  I look forward to testing, although I'll admit I'm also
hoping the method itself never takes off in the malware world.

--
Trever