Hi All,
Just read about another email worm that seems to be making it's way around at
http://www.avertlabs.com/public/datafiles/valerts/vinfo/va10185.asp
and
http://www.sophos.com/downloads/ide/index.html#explorez
The text of the message in the two alerts appears to have a minor
discrepancy between these two, one has a comma after Till then and the
other doesn't. Also, I can't find an accurate subject line to filter on yet.
This is what I have in my rc.viruses file. Comments, easier way to do this?
:0B f
* I received your e-mail and I shall send you a reply ASAP
* take a look at the attached zipped docs
* zipped_files.exe
|formail -A "X-Spam-Reject: rc.viruses - worm.explore"
:0
* ^X-Spam-Reject:
/var/mail/spam
Jerry