On Sunday 21 March 2004 9:04 pm, Erik Corry wrote:
> On Sun, Mar 21, 2004 at 08:43:19PM +0000, Antony Stone wrote:
> > On Sunday 21 March 2004 6:37 pm, Erik Corry wrote:
> > > You need to distinguish between Worms and Viruses. Worms are just
> > > propagating themselves. There's never any harm in dropping a worm
> > > since they are not part of a project or a correspondance.
> > >
> > > Viruses on the other hand attach to otherwise legitimate files and
> > > of course they should be bounced.
> >
> > I disagree. Certainly, many years ago, this was true of viruses, but
> > today?
>
> It is the definition of a virus that it attaches itself to other files.
>
> > I don't think so.
> >
> > What is the most recent virus you can think of which attached itself to
> > otherwise legitimate files, rather than being the entire content of
> > whatever it is the victim receives?
>
> For example most Word Macro viruses are real viruses. To pick a random
> example, Clamav recently added a sig for Macro.Word97.Onex which does not
> mail itself anywhere.
That may be a recent addition to ClamAV's signatures, but it's hardly a recent
virus (about 4 years old, I think?)
> Did you read what I wrote regarding Worms and Viruses? You seem to
> be talking about worms. Viruses are not dead, though there are worm/virus
> hybrids.
Ah, so you would say that NetSky/SomeFool/Bagle/Gibe/Swen are all worms, not
viruses then?
In that case, I would agree with you - worms can safely be dropped without
bouncing - and I think you will almost never see a real virus.
Regards,
Antony.
--
The truth is rarely pure, and never simple.
- Oscar Wilde
Please reply to the list;
please don't CC me.
-------------------------------------------------------
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
_______________________________________________
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users
