Hi Michael

> > How would you, for example, propose to catch a polymorphic 
> executable
> > virus? Our code catches these using a disassembler and 
> examining the code
> > to see if it tries to do something malicious.
> 
> I don't really care what the code is trying to do.  I would be happy
> to discard all executables.  Every single one I receive is junk.

In case it's for a complete server and you're using sendmail: go for mimedefang, 
(http://www.roaringpenguin.com/mimedefang/) it's very nice for mangling mails based on 
mime type and/or file extensions. 

I'm running mimedfang as a sendmail milter and use it to launch both a virus scanner 
and spamassassin checks.

Bye, Martin

_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to