Disinfection by ClamAV

Julian Field mailscanner at ecs.soton.ac.uk
Wed Jan 28 18:59:14 GMT 2004


At 18:17 28/01/2004, you wrote:
>Hi!
>
> > How do I get ClamAV to disenfect email ?  See snippet from maillog below:
> >
> > RMTaPh009920/message.zip: Worm.SCO.A FOUND
> > Jan 27 14:30:11 mail2 MailScanner[590]: Virus Re-scanning: ClamAV found
>
>It wont, Clam will only detect virusses, not clean them.

MailScanner makes a distinction between "cleaning" and "disinfection"
Cleaning = remove the virus from the email, replace it with a harmless text
notification message.
Disinfection = only possible with some scanners and for some macro viruses,
removal of the macro virus from the document leaving the original document
intact. If this steps succeeds then the document is sent on to the original
recipients in a separate message.

MailScanner will "clean" with any virus scanner. It will only "disinfect"
with scanners that can do it. Clam cannot disinfect, but that doesn't mean
any viruses will get through to your users, they won't.
--
Julian Field
www.MailScanner.info
Professional Support Services at www.MailScanner.biz
MailScanner thanks transtec Computers for their support
PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654



More information about the MailScanner mailing list