<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<TITLE>Message</TITLE>
<META content="MSHTML 5.00.3700.6699" name=GENERATOR></HEAD>
<BODY>
<DIV><FONT face=Arial size=2><SPAN
class=119050405-31102003>Hi</SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN
class=119050405-31102003></SPAN></FONT> </DIV>
<DIV><FONT face=Arial size=2><SPAN class=119050405-31102003>I am trying to
make a script (perl) to detect office macro inside an
attachment</SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN class=119050405-31102003>as an illustration,
the script will be called like</SPAN></FONT><FONT face=Arial size=2><SPAN
class=119050405-31102003> : </SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN class=119050405-31102003>myscript
<office_attachment></SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN
class=119050405-31102003></SPAN></FONT> </DIV>
<DIV><FONT face=Arial size=2><SPAN class=119050405-31102003>result :<BR>1. if
contains macro</SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN class=119050405-31102003>0. if
not</SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN
class=119050405-31102003></SPAN></FONT> </DIV>
<DIV><FONT face=Arial size=2><SPAN class=119050405-31102003>Can I make use part
of code of the sanitizer.pl to achive my purpose.</SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN class=119050405-31102003>below is part of the
code I'd like to use.</SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN class=119050405-31102003>
<DIV><FONT face=Arial size=2><SPAN
class=119050405-31102003></SPAN></FONT> </DIV>
<DIV><FONT face=Arial size=2><SPAN class=119050405-31102003><FONT
color=#0000ff> <FONT size=1></FONT><FONT color=#0000ff>open(ATTCH,"<
$destf"); #\<BR> while (<ATTCH>)
{ #\<BR> if (/\023 (INCLUDE(PICTURE|TEXT)[^\000-\037]+)/i)
{ #\<BR> $why .= " " . $ENV{"SC_MBD"} .
" for $1\n"; #\<BR> $score+=
$ENV{"SC_MBD"}; #\<BR> } #\<BR> if
(/(\000|\001|\004)(VirusProtection)/i) { #\<BR> $why .=
" 99 for $&\n"; #\<BR> $score+=
99; #\<BR> } #\</FONT></FONT></SPAN></FONT></DIV>
<DIV><FONT color=#0000ff face=Arial size=1><SPAN
class=119050405-31102003>[deleted]</SPAN></FONT></DIV>
<DIV><FONT face=Arial size=1><SPAN
class=119050405-31102003></SPAN></FONT> </DIV></SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN class=119050405-31102003>Has anyone tried
before?</SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN
class=119050405-31102003></SPAN></FONT> </DIV>
<DIV><FONT face=Arial size=2><SPAN
class=119050405-31102003>Regards<BR>Agung</SPAN></FONT></DIV></BODY></HTML>