Hi!
6-Янв-2005 21:37 [EMAIL PROTECTED] (Noel Jones) wrote to
clamav-users@lists.clamav.net:
NJ> "Cleaning" of viruses is a marketing ploy.
Not agreed. We use antiviruses from middle of 80th, and they save us
many programs, which else be losted...
NJ> after "cleaning" but a corrupted file. The days when a virus would
NJ> simply add x number of bytes to the end of a file are long gone.
This not mean, that there is impossible to restore programs, archives
and other files after some viruses. (Again: I was very swear, when ClamAV
removes archive with bases for F-PROT, where was present EACAR-test file).
BTW, is there exists heuristic search in ClamAV? How ClamAV performs
scan for polymorhic viruses?
NJ> The sysadmin tells the glue program what to do when a virus is found
NJ> according to local policy - 550 reject during SMTP, discard,
What about home users?
NJ> Future versions of clamav may be able to disinfect MS Office
NJ> documents, but I don't see any point in even trying to disinfect an
NJ> executable file. The commercial products get this wrong often enough
Yes, _sometime_ curing of document/executable may be wrong, but (in
present days) this is rarely (at least, if restoring is possible at all).
NJ> that anyone with an infected executable would be well advised to
NJ> restore from a known good source
...which may be nonexisten. :(
NJ> rather than trust the file is back in its original condition.
_______________________________________________
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
