I'm successfully blocking these with:
score MICROSOFT_EXECUTABLE 11.0 score MIME_HTML_NO_CHARSET 11.0
I can get away with that on my gateway, because the usual traffic coming in doesn't have these attributes.
Anyhow, curious if there's more info about this virus/worm, where it originated, etc.
_F
------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk