On Tuesday, September 23, 2003, at 12:13 AM, Philip Mak wrote:
When I scan a MIME message using ClamAV, can I just feed the raw message into ClamAV, or do I have to use ripmime first to extract the individual attachments into files first?
No you don't have to use ripmime.
I've tested a virus message I received, by scanning first the whole MIME message, then just the attachment. ClamAV detected a virus in both cases, but it detected a *different* virus!
There are actually two viruses in the mail.
Whole MIME message: Exploit.IFrame.Gen FOUND Just the attachment: Worm.Gibe.F FOUND
------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
