Re: MS BS + Sorting out the virii

[Michel Messerschmidt <lists@michel-messerschmidt.de>]

On Wed, Sep 24, 2003 at 01:54:42AM +0200, Thomas Ritter wrote:
> And... a mail with a positive virus recognition can be deleted without having 
> to fear it's a false positive, against which a mail found to be Spam by 
> Spamassassin may be a real mail. 

This is not true. 
There's always the possibility of a "false negative" (a innocent file
reported as infected), if the virus definition is poorly choosen. 
Although this is occurs rarely, it is not impossible.
For example there are products out there that "detect" a virus only by 
a single line in a email.

Michel

-- 
Michel Messerschmidt           lists@michel-messerschmidt.de
antiVirusTestCenter, Computer Science, University of Hamburg