> On Monday 03 November 2003 10:42 pm, Mark wrote: > > > Cleaning is one of the most needed functions I think. > > Please can you explain why you think this? > > I agree that ten years ago it was worthwhile removing the bootsector viruses > from floppies, or some of the .exe trojans which would add themselves to > executables, but these days it seems to me that if you receive a virus, that > is all you receive, and there is nothing left if you "clean" it. > > What viruses do you currently receive which can be cleaned from a file which > is useful afterwards?
Ok that's an argument! But what's with the virii which infect files? Or what's about the OLD Virii, Trojans or Worms? What's when I recived a programm wich is infected with the CIV-Virus? Not possible? CIV is always alive in eastern Europe an Asia. Not all virii and worms are member of the same clas of worms/virii we all recived in mass at the last weeks. What's with the coders wich are more subtile as these coders who programmed viriis and worms as sorbig.f and so on? And bootsector-virus... My dad got an old mainboard (for AMD Athlon Thunderbird up to 1300c) which was infected with an bootsector virus. It was 2 months ago and only a VERY OLD Panda-Virus was able to regonize and remove this virus couse all the newer versions of Symantec and Co seams to kickoff this virus out of their virus-db. What would Clam-AV do? Would it delete the Bios? *bad joke* Old Virii are still alive and there enough coders wich wont code a "make it fast, make it yet"-instant Worm a la I_LOVE-YOU or Sorbig. Ok these Virii and Worms will not break out so fast like Sorbig but there still out there. And if you don't belive that Virii wich infects files are still alive have a look into some universities or newspapers. Like parts of the Humbold-University or some local newspapers here in germany. I don't take care only for the Windows-Based-Networks. What's about these virus: http://www.avp.ch/avpve/newexe/unix/vit.stm ? :o) Or http://www.sophos.com/virusinfo/analyses/linuxrstb.html ? These virii are not death couse their still alive in the network of the humbold-university (example). I wont talk about argument pro or contra. All I wanna do is to say it loud: Deleting is not enough, cleaning is also needed for the Virii wich could be removed. It's fact that you could delete Sorbig.F. But it's also fact that you lost data if you're deleting a file wich is infected with Linux.RST.b 8only an example). And Linux.RST.b is removeable... > Regards, Too > Antony. mfg Mark ------------------------------------------------------- This SF.net email is sponsored by: SF.net Giveback Program. Does SourceForge.net help you be more productive? Does it help you create better code? SHARE THE LOVE, and help us help YOU! Click Here: http://sourceforge.net/donate/ _______________________________________________ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users