[pmmail-list] SirCam Virus Filtering Update

[Dian Welle]

On Fri, 03 Aug 2001 00:37:55 -0700 (PDT), Kris Sorem Sr wrote:

>header.-s="date: "
>Will produce false positives for SirCam worm infected message and would
>miss some SirCam infected messages. It may be unconventional but it is
>not contained in any profile of SirCam worm offered by antivirus
>companies.

I'll tell you what, I receive the worm 7-10 times each day, and this
simple filter has caught it 100% of the time for me, and never gotten a
false pos.... yet. 

Di


- pmmail-list - The PMMail Dicussion List ---------------------------
To UNSUBSCRIBE, send a message to mdaemon@bmtmicro.com with the first 
line of the message body being...
UNSUBSCRIBE pmmail-list@blueprintsoftwareworks.com