it should be detected by the macro engine...
Of course. And if Avast can treat doc-files, then he already have "macro engine".
And this "macro engine" don't must execute macroses, like MS Word. Just some parse file (doc, xls, odt, ...), select (exctract) marcoses and just search substring (may by with wildcards) and so on...
No, i not understand why Alwil working so slow. May by virus stream to Alwil is more bigger, then to other antivirus center?...
Imho, antivirus program can not recognize virus only if nobody send virus to developer. But must by strong maximum term from recieve virus to update antivirus database. Then user feel protection.
Thank for good free program.