I believe that the emails will all claim to be from a microsoft support
address which might be a part of the solution. Other things which might also bump up the score would be "cumulative patch", "eliminates all known security vulnerabilities" (insert sarcasm here), and "This update".


Steve

Forrest Aldrich wrote:

This new virus appears to generate many (random?) subjects, so it's getting difficult to narrow down.

Has anyone filters for Spamassassin that will correctly identify this virus? I'd like to score this one high so they are rejected (via spamass-milter)... it's been a huge problem all day.

The fake messages have a preamble like this:

 >>>>>>>>>
MS User

this is the latest version of security update, the "September 2003, Cumulative Patch" update which eliminates all known security vulnerabilities affecting MS Internet Explorer, MS Outlook and MS Outlook Express as well as three newly discovered vulnerabilities. Install now to continue keeping your computer secure from these vulnerabilities. This update includes the functionality of all previously released patches.
<<<<<<<<<




Thanks,
Forrest




------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk




-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to