I'm a Mac user, so I presume a virus-checker wouldn't find the Windows viruses.
I'm getting enough Klezes that just the sheer volume is a nuisance.
There are a lot of virii that use the same basic vector: using
<iframe src=cid:(attachment name) height=0 width=0>
to launch the attachment as soon as the message is viewed.
Thus, looking for
src\s?=\s?cid: (<- perl notation)
is a fine way to get rid of Klez-type nuisance messages.
You might even be able to get away with looking for
\Wcid:
--
Kaitlin Duck Sherwood
Author of the _Overcome Email Overload_ series,
http://www.OvercomeEmailOverload.com
_______________________________________________________________
Have big pipes? SourceForge.net is looking for download mirrors. We supply
the hardware. You get the recognition. Email Us: [EMAIL PROTECTED]
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
