On Sat, 2003-09-20 at 16:40, Diego d'Ambra wrote: > > The current standpoint of the team maintaining the DB is to include > signatures that also detect damaged viruses. These signatures are often > used to detect e-mails that somehow "lost" the damaging part. This is to > prevent users from getting bombarded with e-mails containing only > nonsense. > > The problem with these damaged viruses is that in some cases creating a > signature will increase the risk of false positives when the "leftovers" > are minimal. > > In the case of Gibe.F it was necessary to collect enough samples to > understand what was common between them. Because it is uncertain if the > person behind Gibe.F copied the embedded images from Microsoft, it > wasn't an option only to use these. >
Thank you Diego. I appreciate the decision very much. Dee > Best regards, > Diego d'Ambra > > > ------------------------------------------------------- > This sf.net email is sponsored by:ThinkGeek > Welcome to geek heaven. > http://thinkgeek.com/sf > _______________________________________________ > Clamav-users mailing list > [EMAIL PROTECTED] > https://lists.sourceforge.net/lists/listinfo/clamav-users -- W.D.McKinney (Dee) | Affordable E-Mail and Internet Solutions Alaska Wireless Systems | for Schools, Libraries, Clinics & Business' http://www.akwireless.net | Call 1-907-349-4308 ------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
