Turns out the technical part of your reasoning is correct: MUAs that have downloaded the message don’t get any updates, and hold onto the infected message. No legal ramifications here; it’s my personal server, and it’s in the US. Strange to think that deleting the content of a message would somehow be worse than deleting the content and the headers.
> On Nov 10, 2016, at 6:47 AM, Frank Elsner <fr...@moltke28.b.shuttle.de> wrote: > > On Wed, 9 Nov 2016 15:36:33 -0600 Brad Koehn wrote: > > [ ... ] > >> To help detect and remove the infected messages after they’ve been delivered >> to users’ mailboxes, I created a small script that iterates the INBOX and >> Junk mailbox directories, scans recent messages for viruses, and deletes >> them if found. The source of my script (run via cron) is here: >> https://gitlab.koehn.com/snippets/9 > > Bad idea. The user may already taken the action needed for infection. And > what about legal aspects? > In my country (Germany), information suppression would be punishable. > > > Just my 0.02 €, Frank