Hello again everyone.

I received a file that has been recognized as a virus by f-prot, but not  by
clam.
Indeed it is a virus, since I can open it with my mailer and execute it,
and really get infected.

So I submitted it, and I got this response from Diego d'Ambra :

"E-mail sample with missing headers. SomeFool
found if headers are added."

So removing headers is a good way to let viruses go through ?
You could argue that without headers, a message cannot go through.
Well, it's wrong if this message is itself included in another one, like the
one I got.

So, what's next ? Clam will never recognize those ?
Do I need to write a program to fix headers and/or parse the mbox files
myself
before passing them to clam ?

Flynn





-------------------------------------------------------
This SF.Net email is sponsored by Sleepycat Software
Learn developer strategies Cisco, Motorola, Ericsson & Lucent use to 
deliver higher performing products faster, at low TCO.
http://www.sleepycat.com/telcomwpreg.php?From=osdnemail3
_______________________________________________
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users

Reply via email to