procmail
[Top] [All Lists]

W32(_dot_)Badtrans(_dot_)B(_at_)mm spammers tip off ???

2002-01-17 20:04:07
Norton AntiVirus deleted the following email messages because they were infected with a virus:

From: "Agustí Coscollola" <_cosco(_at_)viladetora(_dot_)net>
From: "Ute Leifker" <_ute(_dot_)leifker(_at_)arcormail(_dot_)de>
From: "yasuko saito" <_yasaito(_at_)pd(_dot_)jaring(_dot_)my>

I received 3 of the W32(_dot_)Badtrans(_dot_)B(_at_)mm & the .enc attachments from the {explicative deleted] spammers above.

Of interesting note, each of the "From:" e-mail address begins with an underscore. Is this a tip off of how this pain-in-the-butt annoyance is frequently spread???

If I setup a quick recipe to nuke anything From:.*/_.* will this also thrash any legitimate "firstname_lastname(_at_)somedomain(_dot_)com" e-mails which use an underscore between the names (as compared to starting with an underscore)???

Thanks.

Eric




_______________________________________________
procmail mailing list
procmail(_at_)lists(_dot_)RWTH-Aachen(_dot_)DE
http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail

<Prev in Thread] Current Thread [Next in Thread>