> That depends on how broken it is. I guess that's the problem with this virus. It is so badly written.
> Beyond a certain amount of loss of the complete virus, there > isn't enough left to know what it was supposed to be, and besides, if what > you've got isn't the complete Mimail virus, it shouldn't be labelled to suggest that it is. > > If what you have is a damaged piece of viral code, does it really matter which > virus it was before it got damaged? In some cases, yes. I am having a statistics where I would like to know which virus it was instead of "Seriously Broken Zip". I don't think that's a bad thing, but why shouldn't it possible to have a signature of this damaged virus? Regards, Phil. ------------------------------------------------------- This SF.net email is sponsored by: Perforce Software. Perforce is the Fast Software Configuration Management System offering advanced branching capabilities and atomic changes on 50+ platforms. Free Eval! http://www.perforce.com/perforce/loadprog.html _______________________________________________ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users