Disinfection by ClamAV
Matt Kettler
mkettler at EVI-INC.COM
Wed Jan 28 18:59:31 GMT 2004
At 01:17 PM 1/28/2004, Raymond Dijkxhoorn wrote:
> > RMTaPh009920/message.zip: Worm.SCO.A FOUND
> > Jan 27 14:30:11 mail2 MailScanner[590]: Virus Re-scanning: ClamAV found
>
>It wont, Clam will only detect virusses, not clean them.
Besides, in the case of Worm.SCO.A, disinfection == deletion.
SCO.A doesn't infect legitimate files, it just emails copies of itself. An
infected file consists entirely of the worm itself and nothing else.
More information about the MailScanner
mailing list