[pmmail-list] Filter for newest virus

[Dave Hathaway]

The filter I have been using for SirCAM seems to catch the badtrans 
one as well:


h-s="date: " & a="YES"

I set the subject to VIRUS and the priority to HIGH, and visually 
inspect the email.  It could be all the viruses created by the virus 
factory will be caught by this.

Dave

On Tue, 27 Nov 2001 06:24:05 -0800, Kenneth Porter wrote:

>http://securityresponse.symantec.com/avcenter/venc/data/w32.badtrans.
b@m
>m.html
>
>Anyone got a filter for this? I'm seeing it weighing in at about 40k
>for each message, and no body, just the attachments. I'm thinking
>something like subject of "Re:", empty body, and size from 38k to 42k
>(to allow for variation in headers).
>
>Ken
>mailto:shiva@well.com
>http://www.sewingwitch.com/ken/
>[If answering a mailing list posting, please don't cc me your reply. 
I'll take my answer on the list.]
>
>
>
>- pmmail-list - The PMMail Dicussion List ---------------------------
>To POST to the list, send your message to:
>pmmail-list@blueprintsoftwareworks.com
>
>To UNSUBSCRIBE, send a message to mdaemon@bmtmicro.com with the first 
>line of the message body being...
>UNSUBSCRIBE pmmail-list@blueprintsoftwareworks.com
>---------------------------------------------------------------------




_________________________________________________________
Do You Yahoo!?
Get your free @yahoo.com address at http://mail.yahoo.com

- pmmail-list - The PMMail Dicussion List ---------------------------
To POST to the list, send your message to:
pmmail-list@blueprintsoftwareworks.com

To UNSUBSCRIBE, send a message to mdaemon@bmtmicro.com with the first 
line of the message body being...
UNSUBSCRIBE pmmail-list@blueprintsoftwareworks.com
---------------------------------------------------------------------