On Sun, May 07, 2000 at 03:06:52PM +0200, Rainer Link wrote:
> Sweep, H+B EDV AntiVir, KasperskyLabs AVP or F-Secure AV. If a infected
> attachment is detected, the complete mail is moved to a quarantine
> directory. It is then up to you, to clean a infected attachment with one
> of the above commercial antivirus software.
Too right - in fact I think that's probably the best thing to do. Cleaning
up infected Email means what - you _don't_ bother telling anyone there was
an infection present? If you can clean out the virus automatically, where is
the "incentive" for the infected person to actually get rid of the virus?
Quarantines are the best option IMHO - they "suggest" to the infected party
that they should sort out their system, and still allow the recipient to get
access to the message (after it's been manually cleaned of course).
Of course, what do you do with viruses like ILOVEYOU? There is no message to
"clean" as such...
--
Cheers
Jason Haar
Unix/Network Specialist, Trimble NZ
Phone: +64 3 9635 377 Fax: +64 3 9635 417
