Disinfection by ClamAV

Matt Kettler mkettler at EVI-INC.COM
Wed Jan 28 18:59:31 GMT 2004


At 01:17 PM 1/28/2004, Raymond Dijkxhoorn wrote:
> > RMTaPh009920/message.zip: Worm.SCO.A FOUND
> > Jan 27 14:30:11 mail2 MailScanner[590]: Virus Re-scanning: ClamAV found
>
>It wont, Clam will only detect virusses, not clean them.

Besides, in the case of Worm.SCO.A, disinfection == deletion.

SCO.A doesn't infect legitimate files, it just emails copies of itself. An
infected file consists entirely of the worm itself and nothing else.



More information about the MailScanner mailing list