On Mon, 25-Nov-2002, at 13:24:27 -0700, scott.list wrote:
Greetings:
Does anyone have a recipe for handling the W32(_dot_)Klez(_dot_)H(_at_)mm
virus? I've
been getting more variants of this lately. I looked in the archives
but didn't find one for this variant. this is the O'l "I have a
[funny|nive|etc] game. I hope you would enjoy it..." thing.
Something standalone for a non-procmail guru to use as if it were the
only recipe.
I haven't seen a Klez using this:
# Trap Klez (signature as of 04/26/2002)
#
:0
* > 10000
* ^Content-Type:.*multipart/alternative;
{
:0 B hfi
* \<i?frame +src=(3D)?cid:.* height=(3D)?[0-9]
+width=(3D)?[0-9]>
* ^Content-Type:.*audio/
* ^TVqQAAMAAAAEAAAA
/dev/null
:0 B E hfi
* ^Content-Type:.*application/octet-stream
* ^Content-Transfer-Encoding: base64
* ^TVqQAAMAAAAEAAAA
/dev/null
}
--
You are responsible for your Rose
Rule #5 Get Kirsten Dunst Wet
_______________________________________________
procmail mailing list
procmail(_at_)lists(_dot_)RWTH-Aachen(_dot_)DE
http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail