"Richard Beyer" <[EMAIL PROTECTED]> wrote ...
> We're seeing a lot of activity from the [EMAIL PROTECTED] virus
>
(http://securityresponse.symantec.com/avcenter/venc/data/[EMAIL PROTECTED]
l)

> Could someone help me cobble together a rule quickly to counteract the
> attachments it's using.  Something to catch test.zip, readme.zip and
> body.zip (the most common ones it appears to be using at the moment).

This is a list of all the filenames I've seen so far today:

 body.bat
 body.exe
 body.zip
 data.pif
 data.scr
 doc.zip
 document.pif
 document.zip
 kcmnw.exe
 message.scr
 message.zip
 pqoew.pif
 readme.scr
 readme.zip
 text.exe
 text.zip
 xatwdu.zip

Cheers,
John





-------------------------------------------------------
The SF.Net email is sponsored by EclipseCon 2004
Premiere Conference on Open Tools Development and Integration
See the breadth of Eclipse activity. February 3-5 in Anaheim, CA.
http://www.eclipsecon.org/osdn
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to