Disinfection by ClamAV

[Michael J. Allen]

Thanks to all for the help and clarifications regarding MailScanner and
ClamAV.  A most enlightening discussion!

Mike

Julian Field wrote:

> At 18:17 28/01/2004, you wrote:
>
>> Hi!
>>
>> > How do I get ClamAV to disenfect email ?  See snippet from maillog
>> below:
>> >
>> > RMTaPh009920/message.zip: Worm.SCO.A FOUND
>> > Jan 27 14:30:11 mail2 MailScanner[590]: Virus Re-scanning: ClamAV
>> found
>>
>> It wont, Clam will only detect virusses, not clean them.
>
>
> MailScanner makes a distinction between "cleaning" and "disinfection"
> Cleaning = remove the virus from the email, replace it with a harmless
> text
> notification message.
> Disinfection = only possible with some scanners and for some macro
> viruses,
> removal of the macro virus from the document leaving the original
> document
> intact. If this steps succeeds then the document is sent on to the
> original
> recipients in a separate message.
>
> MailScanner will "clean" with any virus scanner. It will only "disinfect"
> with scanners that can do it. Clam cannot disinfect, but that doesn't
> mean
> any viruses will get through to your users, they won't.
> --
> Julian Field
> www.MailScanner.info
> Professional Support Services at www.MailScanner.biz
> MailScanner thanks transtec Computers for their support
> PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654