[SAtalk] W32.Novarg.A@mm virus

[Richard Beyer]

We’re seeing a lot of activity from the W32[EMAIL PROTECTED] virus (http://securityresponse.symantec.com/avcenter/venc/data/[EMAIL PROTECTED])   Could someone help me cobble together a rule quickly to counteract the attachments it’s using.  Something to catch test.zip, readme.zip and body.zip (the most common ones it appears to be using at the moment).   Cheers, Richard