> This new virus appears to generate many (random?) subjects, so it's > getting > difficult to narrow down. > > Has anyone filters for Spamassassin that will correctly identify this > virus? I'd like to score this one high so they are rejected (via > spamass-milter)... it's been a huge problem all day.
I found that after manually learning about 50 of them with sa-learn they are now scoring high enough to get caught. I also increased the score of MICROSOFT_EXECUTABLE to 5.0 but I'm not sure this has any effect cos I think MIMEDefang will already have stripped the attachment before SA sees the message - but I'm not really sure about this. ------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
