>>>>> "YD" == Yorkshire Dave <[EMAIL PROTECTED]> writes:

>> only report a found virus if the virus is not known to be one that
>> forges the return address.

YD> Almost, but not quite. The virus checking programs need to do the
YD> opposite of that, only report a found virus which is known to be one
YD> which does not forge the return address, otherwise we get a spew like
YD> this with every new address-forging virus release.

This latest one was identified by my scanner as a variant of SOBIG, so
was "known" to be a forger, even though it was considered "new" too.


-- 
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
Vivek Khera, Ph.D.                Khera Communications, Inc.
Internet: [EMAIL PROTECTED]       Rockville, MD       +1-240-453-8497
AIM: vivekkhera Y!: vivek_khera   http://www.khera.org/~vivek/


-------------------------------------------------------
This SF.Net email sponsored by: Free pre-built ASP.NET sites including
Data Reports, E-commerce, Portals, and Forums are available now.
Download today and enter to win an XBOX or Visual Studio .NET.
http://aspnet.click-url.com/go/psa00100006ave/direct;at.asp_061203_01/01
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to