major update... my eyes hurt.. 8-)
version 1.6 ( http://agriroot.aua.gr/~nikant/nkvir-rc )
- some more signatures
- catching partial messages (if the first has base64 headers or bad
attachment is caught so the rest are useless)
- clsid extension regognition
- eicar standard av file :-)
- e-mails with no attachment but with iframes, xml objects or clsid ext get
a warning at subject line
----- Original Message -----
From: "Nikos K. Kantarakias" <nikant(_at_)freemail(_dot_)gr>
To: "PROCMAIL list" <procmail(_at_)lists(_dot_)RWTH-Aachen(_dot_)DE>
Sent: Tuesday, January 07, 2003 4:19 PM
Subject: Re: YAVR (Yet Another Virus Recipe) :-)
Just for anyone that used this..
I'd be happy to send me variants or executables that pass to
virus-could-be
for analysis
-----------------------------------------------------
signature text:
Nikos K. Kantarakias
URLs: http://www.nikant.tk/
http://www.skiathos.tk/
http://agriroot.aua.gr/
_______________________________________________
procmail mailing list
procmail(_at_)lists(_dot_)RWTH-Aachen(_dot_)DE
http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail