On Thursday 08 April 2004 8:45 pm, Jack London Networks wrote:

> Okay, I like the --mbox support of clamscan.  Problem is - now that I
> know there are infected messages in people's inboxes/other folders, I
> have very little information to go on to find and clean those
> messages.   For example, I know a few people have copies of  Bagle,
> SomeFool/Netsky and so forth - but in an inbox of 4,000 items - how do I
> know _which_ message is infected?

I guess you could put something together using fetchmail to copy the mailbox 
to a "scanning" account, fetch the mails from there and pass them through 
ClamAV, and deliver only the clean ones back to the real mailbox, 
alternatively there may be something in http://mboxgrep.sourceforge.net which 
would help out - perhaps use ClamAV to find the names of the attachment files 
containing the viruses, then use mboxgrep to find the mails containing those 
attachment names?

Just my few random thoughts,

Happy Easter.

Regards,

Antony.

-- 
Documentation is like sex.
When it's good, it's very very good.
When it's bad, it's still better than nothing.

                                                     Please reply to the list;
                                                           please don't CC me.



-------------------------------------------------------
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
_______________________________________________
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users

Reply via email to