On Thursday, June 19, 2008, 7:33:44 AM, Yet Ninja wrote: > Guys, you're being hit with hacked web site URIs showing up in a heavy > spam flood. I see Uribl.com got most of them, but in case:
> rawbody GMD_R_DOT_HTML /\/r\.html$/ > describe GMD_R_DOT_HTML Possible hacked site with porntube redirect > score GMD_R_DOT_HTML 3.5 > Note: making it an uri rule doesn't hit them all. > enjoy It and video.exe are Storm. Jeff C. -- Jeff Chan mailto:[EMAIL PROTECTED] http://www.surbl.org/
