Re: [Evolution] running virus scanner with ev 1.4.5 on linux

[Chuck Mattsen <mattsen arvig net>]

On Wed, 2004-04-14 at 07:48, Tony Earnshaw wrote:
> ons, 14.04.2004 kl. 05.14 skrev Gerald Pine:
>
> > I'm using 1.4.5 with SuSE 9.0 and using spambayes to scan for viruses. 
> > As another poster pointed out, there haven't been any viruses affecting
> > linux, but i exchange files with windows users, and i don't want to be
> > blamed for infecting their machines.  Spambayes works fine if you load
> > virtually all the Python files.  Get the program from
> > spambayes.sourceforge.net.  If you are using an earlier version of
> > Python than 2.3, you also need to install the email 2.5.4 package.  The
> > instructions are pretty good, and the only complication is that you need
> > to train the program to recognize spam.  Save a batch of old emails to
> > do that.  
>
> What does Spambayes have to do with virus?

I can't speak to spambayes, as I don't use it, but I /do/ use POPFile,
which is another Bayesian filter.  Actually, if you run a few
virus-containing e-mails through a Bayesian filter, it can learn to
recognize virus-containing messages after awhile, just as it learns to
recognize spam.  It will then "quarantine" the message, preventing any
attachments from running, even in non-secure environments like <cough>
MS Outlook with preview pane enabled.

It's certainly not a method I would solely rely upon with respect to
isolating viruses, but it /can/ be an added wall of defense in
conjunction with a good AV program and safe computing practices.  Far
from perfect, and not 100% reliable, but an extra aide, nonetheless.

-- 
Chuck Mattsen / mattsen arvig net / RLU #346519 
Mandrakelinux release 10.1 (Cooker) for i586 kernel 2.6.3-4mdk 
10:08:50 up 11 min, 0 users, load average: 0.49, 0.47, 0.24 

Success is a journey, not a destination.