Marc Perkel wrote:
Does anyone have a way to distinguish these damn viruses in ZIP files from real zip files?
Yes, clamav does, at least as of their March 3 signature file.
They are open source if you are curious how they are doing it.
Personally, I just appreciate that they are free and on the ball keeping their signatures up to date. With clamav filtering my mail before SpamAssassin ever sees it, I have no problem with SpamAssassin development concentrating on stopping spam instead of being distracted keeping up with the virus/worm du jour.
-- sidney
