SLUG Mailing List Archives
Re: [SLUG] Mid-DATA spam/AV detection considered harmful [Was: Virusscanningbounce strategy]
- To: slug@xxxxxxxxxxx
- Subject: Re: [SLUG] Mid-DATA spam/AV detection considered harmful [Was: Virusscanningbounce strategy]
- From: lists@xxxxxxxxxx
- Date: Mon, 2 Feb 2004 00:37:20 +1100 (EST)
- User-agent: SquirrelMail/1.4.2-0.1.7.x
> Are you using this one (body check)?
> /^UEsDBAoAAAAAA/ DISCARD W32.MyDoom.A
yes, as well as, I now addded as below:
BUT, I still keep getting (like, to my own email address) quite a few 30k
zip files, which, I guess, are the mydooms.
should that stop the ZIPs ?
for now, I'm dropping all the ZIPs till I can sort this out
/^UEsDBAoAAAAAA/ DISCARD bc5
/^ Test =\)$/ REJECT infected: I-Worm.Bagle
# addded 29/01/04
DISCARD VIRUS (sobig.f)
DISCARD VIRUS (W32/Swen@MM)
DISCARD VIRUS (W32/Bagle@MM)
DISCARD VIRUS (W32/Mydoom@MM)