Hi Folks, Sam,

On Sun, 30 Mar 2003 14:55:55 +1000, Samuel W. Heywood wrote:

> I have noticed that F-prot AV will discover, flag, identify, and report
> any MIME-encoded email attachments containing viruses in messages
> received by Arachne's email client, even if the the attachment has not
> yet been decoded and saved to a file.

> In the case of messages received by Nettamer's email client a
> MIME-encoded attachment containing a virus will not get caught by
> F-prot until after the attachment has been decoded and saved to a
> file.

> This applies even in the case of same virus, different email client.

> I wonder why this is so.  Does anyone know why?

   I only use Arachne for email.

   I have also noted that F-Prot, which I use daily, will identify some
attached virii immediately, and a very few not until the message has
been opened and the attachments written to TEMP.

   I have always assumed that for some of those email attachments the
identity of the attachment is not so easy to pick because of some
difference in the encoding. (MIME or UU ?)

Regards,
        Ron




Ron Clarke
http://homepages.valylink.net.au/~ausreg/index.html
http://tadpole.aus.as
-- This mail was written by user of The Arachne Browser - http://arachne.cz/

Reply via email to