Robert Spier wrote:
   This may work for uvscan, but won't work for clamav that also
   detects phishing scams.

False alarm; that's a poorky worded commit message. I was only skipping non-multipart messages _from within uvscan itself_. I noticed this when I was implementing the bitdefender plugin and just backported the same code (stolen from signatures_exe) to uvscan. I'm considering making the test a little more sophisticated, since I remembered that some versions of lookOut will automatically uudecode a file contained in a text/plain message. Yes, that is Evil, why do you ask? ;-)


Though, you have given me the idea to create a virus-scan wrapper which could be set to either randomly choose from the list of AV packages installed, rather than blindly run all of them (which is what I am doing right now until the Mydoom tsunami is over). I still wouldn't skip the non-multipart messages except in the actual scanner plugin.

John

Reply via email to