> >> Virus-scanning anything bigger than 1-2Mb makes little sense. > >> ANything > >> as big as 20Mb, I would just skip without further consideration. > > > > Nowadays it is not unusual to find malware samples exceeding that > > 2MB size limit. > > It's certainly possible for a large Word/Excel/whatever file to be > infected, but they aren't very common. Out of the 400+ viruses > quarantined over the past week or so on one of my mail servers, the > average size was 11KB, and the largest malicious email was 116KB (it > contained Worm.Bagle.pwd-eml).
And I saw 2 days ago archive, >3MB, which contained app, infected by W32.Beagle.DZ, and several hours later another one, also Beagle-something infected. So, you never know... I'd rather waste my server resources, as sad as this is, instead of allowing virus in. Best, -- Arthur Sherman +972-52-4878851 http://www.cpt.co.il/ _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html
