We are using the script by Nikos Kantarakias called "yet another virus recipe" for Procmail. See http://agriroot.aua.gr/~nikant/nkvir/
Nikos added Novarg this morning. <<Dan>> | -----Original Message----- | From: Jon [mailto:[EMAIL PROTECTED] | Sent: Tuesday, January 27, 2004 5:08 AM | To: Richard Beyer | Cc: [EMAIL PROTECTED] | Subject: Re: [SAtalk] [EMAIL PROTECTED] virus | | On Tue, 2004-01-27 at 02:41, Richard Beyer wrote: | > Something to catch test.zip, readme.zip and body.zip (the | most common | > ones it appears to be using at the moment). | > | | Symantec has a lot of information on the attachments it uses, | although the message body might be easier to write accurate | rules for. See "9. | The email will have the following characteristics:" | | http://www.sarc.com/avcenter/venc/data/[EMAIL PROTECTED] | | - Jon | | -- | [EMAIL PROTECTED] | | Administrator, tgpsolutions | http://www.tgpsolutions.com | ------------------------------------------------------- The SF.Net email is sponsored by EclipseCon 2004 Premiere Conference on Open Tools Development and Integration See the breadth of Eclipse activity. February 3-5 in Anaheim, CA. http://www.eclipsecon.org/osdn _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
