>>>>> "YD" == Yorkshire Dave <[EMAIL PROTECTED]> writes:
>> only report a found virus if the virus is not known to be one that >> forges the return address. YD> Almost, but not quite. The virus checking programs need to do the YD> opposite of that, only report a found virus which is known to be one YD> which does not forge the return address, otherwise we get a spew like YD> this with every new address-forging virus release. This latest one was identified by my scanner as a variant of SOBIG, so was "known" to be a forger, even though it was considered "new" too. -- =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Vivek Khera, Ph.D. Khera Communications, Inc. Internet: [EMAIL PROTECTED] Rockville, MD +1-240-453-8497 AIM: vivekkhera Y!: vivek_khera http://www.khera.org/~vivek/ ------------------------------------------------------- This SF.Net email sponsored by: Free pre-built ASP.NET sites including Data Reports, E-commerce, Portals, and Forums are available now. Download today and enter to win an XBOX or Visual Studio .NET. http://aspnet.click-url.com/go/psa00100006ave/direct;at.asp_061203_01/01 _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk