[Mimedefang] ClamAV's Worm/Trojan/Joke/W97M classifications

[Kelson]

Matt Cuttitta wrote:
> It appears that ClamAV's virus database attempts to classify malware by
> prefixing the virus name.  However, many of the viruses don't have
> prefixes and others are prefixed by W32 and other things.  Does anyone
> handle different viruses differently?  i.e. discard worms and trojans, but
> strip Word viruses?

We discard anything starting with Worm. or ending in @mm (plus a few 
specific mass-mailing viruses that don't fit the naming conventions), 
and reject everything else.

-- 
Kelson Vibber
SpeedGate Communications <www.speed.net>