"Richard Beyer" <[EMAIL PROTECTED]> wrote ... > We're seeing a lot of activity from the [EMAIL PROTECTED] virus > (http://securityresponse.symantec.com/avcenter/venc/data/[EMAIL PROTECTED] l)
> Could someone help me cobble together a rule quickly to counteract the > attachments it's using. Something to catch test.zip, readme.zip and > body.zip (the most common ones it appears to be using at the moment). This is a list of all the filenames I've seen so far today: body.bat body.exe body.zip data.pif data.scr doc.zip document.pif document.zip kcmnw.exe message.scr message.zip pqoew.pif readme.scr readme.zip text.exe text.zip xatwdu.zip Cheers, John ------------------------------------------------------- The SF.Net email is sponsored by EclipseCon 2004 Premiere Conference on Open Tools Development and Integration See the breadth of Eclipse activity. February 3-5 in Anaheim, CA. http://www.eclipsecon.org/osdn _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk