Hello,
Softlabs AntiVirus 0.5.5 has been released today. Softlabs AntiVirus is
now a SourceForge.net Project and has its official home at
http://softlabsav.sourceforge.net/
This version includes an important hole closure which could allow
viruses such as Tofger.AM to pass. Now we should really observe a Zero
false-negative detection rate.
As a side note, the current version of NAI's free Virus Scanner for
Windows, McAfee Stinger (version 2.1.4) does not detect that virus.
Softlabs AntiVirus now does :-)
This release can be downloaded directly via
http://prdownloads.sourceforge.net/softlabsav/SoftlabsAV-0.5.5.tar.bz2?download
from one of currently 10 worldwide mirrors.
If someone wants to be notified when the next release will be
available, please request at
http://sourceforge.net/project/filemodule_monitor.php?filemodule_id=112486
Everybody is welcome to post comments and opinions into the Open
Discussion Forum at
http://sourceforge.net/forum/forum.php?forum_id=360141
(no registration required, but recommended). Here is the ChangeLog:
____________________________________________________________________________
v0.5.5 (2004 03 18)
+ Softlabs AntiVirus is now a SourceForge.net Project, with its Home at
http://softlabsav.sourceforge.net/
+ a hole has been closed that could allow viruses to pass if the
infectious attachment was located after a clean attachment in the
message's body. This affected the Tofger.AM virus.
+ since very small viruses have arrived (for example, a Tofger.AM infected
EXE.exe with a file size of 7168 B), the minimum size for a message to
be considered as infected has been decreased to 9 KB. The previous
limit has also worked, though. Just to be sure.
+ formail is no more executed on each infected message to ensure we have
a Message-ID, unless there is no Message-ID with only file-save
characters. Thanks to Ruud H.G. van Tol for the suggestion.
+ the routine used to make a directory if necessary has been outsourced
into an own .inc file
+ TRAP is now also used for moving a file.
+ the distributed package is now bzip2 (.bz2) compressed, rather than
GNU-Zip (.gz) compressed.
Best regards,
rob.
_______________________________________________
procmail mailing list
procmail(_at_)lists(_dot_)RWTH-Aachen(_dot_)DE
http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail