[pmmail-list] SirCam Virus Filtering Update

[Bruce Francis]

On Fri, 03 Aug 2001 06:34:57 -0700, Dian Welle wrote:

>On Fri, 03 Aug 2001 00:37:55 -0700 (PDT), Kris Sorem Sr wrote:
>
>>header.-s="date: "
>>Will produce false positives for SirCam worm infected message and would
>>miss some SirCam infected messages. It may be unconventional but it is
>>not contained in any profile of SirCam worm offered by antivirus
>>companies.
>
>I'll tell you what, I receive the worm 7-10 times each day, and this
>simple filter has caught it 100% of the time for me, and never gotten a
>false pos.... yet. 

<breaking in> ... that's good for you.

*But* it doesn't _prove_ anything.


--- 
Bruce Francis              BFrancis@pobox.com
 For PGP Public key:  email with Subject "BFrancis Public Key"
________________________________________________________

- pmmail-list - The PMMail Dicussion List ---------------------------
To UNSUBSCRIBE, send a message to mdaemon@bmtmicro.com with the first 
line of the message body being...
UNSUBSCRIBE pmmail-list@blueprintsoftwareworks.com