procmail
[Top] [All Lists]

Re: W32/Yaha-K recipe?

2003-01-04 10:15:37
On Fri, Jan 03, 2003 at 05:43:00PM -0600, scott wrote:

Greetings:

Does anyone have a specific recipe to filter the 
W32/Yaha-K worm?
Thanks very much for the time to share if you do,
Scott

Yaha should get blocked with a generic executable blocker, for example:

:0 fhw
* B ?? ^Content-type: (audio|application)
* B ?? name=.*\.(com|exe|bat|scr|pif|hta|shs|vb[es]|ws[fh])\>
* Subject: *\/.+
| formail -I "Subject: POSSIBLE VIRUS: $MATCH"

-- 
  Paul Chvostek                                             
<paul(_at_)it(_dot_)ca>
  Operations / Abuse / Whatever                                                 
 
  it.canada, hosting and development                   http://www.it.ca/


_______________________________________________
procmail mailing list
procmail(_at_)lists(_dot_)RWTH-Aachen(_dot_)DE
http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail

<Prev in Thread] Current Thread [Next in Thread>
  • W32/Yaha-K recipe?, scott
    • Message not available
      • Re: W32/Yaha-K recipe?, Paul Chvostek <=