> -------- Original Message -------- > Subject: Re: [Clamav-users] new sig please test > From: Dennis Peterson <[EMAIL PROTECTED]> > Date: Fri, December 16, 2005 10:39 am > To: clamav-users@lists.clamav.net > > > > > I don't normally create my own sig's but this morning we are getting a > > lot of these. ClamAV is not detecting anything. Below is a sig , below > > is one of the messages. My concern before I put this into production is > > that my sig attempt may be to broad and catch things that shouldn't. > > > > > > R0lGODdhuAGkAYAAAP///wAAACwAAAAAuAGkAQAC/owRiGetqYBcTiZ2j3X6wZ9dHgdZlOlFZbdM > > psi4DXlWbgvW2oyH8b+ZiB6bDCpUlM2WQeEnGRNCe6TfE2Z13lrNSulFC4OYYOaXDE7KUDVixD3k > > It seems to me it would be less machine effort to look for this pattern in > a message and reject or tempfail it: > > R0lGODdhuAGkAYAAAP > > According to the google searches I've done the onl place this shows up is in > these spamograms. > > dp > _______________________________________________ > http://lurker.clamav.net/list/clamav-users.html
I tried to google that pattern and didn't find anything , except for in the newsgroups and only 6 postings. Can you elaborate anymore on spamograms. Is that a spam message sent as an image? I have been unable to produce a viewable image of what I am getting flooded with. Zach Zachary Buckholz - Linux Administrator - GoDaddy.com 14455 North Hayden Road, Suite 226, Scottsdale, AZ 85260 480-505-8800 x4322 - 480-215-5218 (Cell) _______________________________________________ http://lurker.clamav.net/list/clamav-users.html
