In most cases these EXEs are caught by virus scanners under the "Trojan" category.
Daz > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:spamassassin- > [EMAIL PROTECTED]] On Behalf Of Richie Laager > Sent: 04 May 2002 14:00 > To: Daniel Pittman > Cc: [EMAIL PROTECTED] > Subject: Re: [SAtalk] Re: Ick Viruses! > > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > On Saturday 04 May 2002 03:26 am, Daniel Pittman wrote: > > On Sat, 4 May 2002, LuKreme wrote: > > > OK, I know SA is not an anti virus tool, and frankly I > > > don't care about viruses anyway, but I am getting a lot of > > > exe file attachements the last day or two > > > > [...] > > > > > I was surprised there wasn't a .exe rule or a > > > application/octet-stream rule. > > > > Those two statements seem to contradict each other. Given > > that you know that SpamAssassin is not a virus scanner, why > > are you surprised when it fails to detect virus content? > > Not necessarily. I've seen my share of spams (typically > porno-spams) that include an .exe, which is not a virus. When > you run it, it sets up a dial-up account for a pay-per-minute > porn service. I've seen many users accidentally open these > files out of habit. (I think they're ignoring the message and > going straight for the attachment.) > > > If you want to filter these, try something that's designed > > for the purpose. > > Correction: "If you want to filter [viruses], try something > that's designed for the purpose." > > I feel that a rule to catch .exe attachments would be great. > However, if this gets taken as far as blocking .vbs files, > then you're treading into the realm of viruses. > > - -- > Richie Laager > Wikstrom Telecom Internet > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1.0.6 (GNU/Linux) > Comment: For info see http://www.gnupg.org > > iD8DBQE809tsbfU6uV4fG84RAp9UAJoDgatMhQh/VzAG/3f+O3M2XXQjkwCfUQOU > MXqrm8yEy5KosDowVdWKjPI= > =uiz6 > -----END PGP SIGNATURE----- > > _______________________________________________________________ > > Have big pipes? SourceForge.net is looking for download mirrors. We supply > the hardware. You get the recognition. Email Us: [EMAIL PROTECTED] > _______________________________________________ > Spamassassin-talk mailing list > [EMAIL PROTECTED] > https://lists.sourceforge.net/lists/listinfo/spamassassin-talk _______________________________________________________________ Have big pipes? SourceForge.net is looking for download mirrors. We supply the hardware. You get the recognition. Email Us: [EMAIL PROTECTED] _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
