This will block .doc, .xls (but not .docx, .xlsx) containing ANY macros (including benevolent ones):
create /etc/e-smith/templates-custom/etc/clamd.conf/OLE2BlockMacros containing:
OLE2BlockMacros yes
then run:
expand-template /etc/clamd.conf
sv t clamd
Clamd log should show: OLE2: Blocking all VBA macros. and Heuristics.OLE2.ContainsMacros FOUND