procmail
[Top] [All Lists]

Re[2]: virus recipe for MyDoom

2004-01-27 10:50:21
Robin:



:0 B
* ^This message contains Unicode characters and has been sent
/home/spool/mail/virus/mydoom-spam
:0 B
* ^The message contains Unicode characters and has been sent
/home/spool/mail/virus/mydoom-spam
:0 B
* ^The message cannot be represented in 7-bit ASCII encoding and
/home/spool/mail/virus/mydoom-spam
:0 B
* ^Mail transaction failed. Partial message is available.
/home/spool/mail/virus/mydoom-spam

:0 B
*
1rrAeM0gDQdlmmtNtWVfG3QRFA672grQLlgIdDhobVVL2XMWVlc87bWFzho6IHtwAj2d9r
/home/spool/mail/virus/mydoom-spam
:0 B
*
Ga9SG/3//7dSpCoQS7DvKZAv72JQKWmvdKWWbadVD/D//9vSfeg2mRbgbKcMvEZXguXrNq
/home/spool/mail/virus/mydoom-spam
:0 B
*
TBuvVXOm//9/idxR1/7/Y6uPvh3LTd755dO39hzsPp/6sfv///8xZXpCOlu2J40AUMvgDP
/home/spool/mail/virus/mydoom-spam
:0 B
*
Q2VDAuk6pQf8sthCvHkbFDMACWK8hd0C2mSZPSKSIjutcMMWTmfwLUdsuyF4o1Tjemh5hk
/home/spool/mail/virus/mydoom-spam
:0 B
*
Z3h2Z0tDwwdp3y78fy10dmV5LTIuMG9xcIxfY05wdXJmmaHdCjNcdmkLRDvZ1r5tSGRWLV
/home/spool/mail/virus/mydoom-spam
:0 B
*
V0jTDPIH0MgIsEjTDDKYiAqARYEDNnhPUmWtFnAb4JuraGYHK2nGAwbeAiBFcj2UWskGOE
/home/spool/mail/virus/mydoom-spam

<<<

Cheers and good luck!

Is there a way to have these checked only if the message meets the
size criteria?, that is, see if it's in this size range, then test the
other matches?

:0 B
* > 30000
* < 34000




_______________________________________________
procmail mailing list
procmail(_at_)lists(_dot_)RWTH-Aachen(_dot_)DE
http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail

<Prev in Thread] Current Thread [Next in Thread>