-- Bill Landry said the following on 8/30/07 10:51 PM: > > Not all SaneSecurity signatures need to see the full message. If I > recall correctly, it's only the mail file type (designated by :4: in the > signature) that need to see the headers and body together. Anyway, as
I received a question about this particular ecard business: http://secunia.com/virus_information/40057/zhelatin.geneml/ Apparently GroupShield is catching this, but ClamAV is not. Do you know if ClamAV needs to see the entire message in order to catch this one? Thanks, Amos _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html
