Re: Busy day for worms! Filtering

From: Nancy McGough (nm-reverse-spam-filter_at_ii.deflexion.com)
Date: 01/27/04 

Date: Tue, 27 Jan 2004 10:11:14 +0000

On 27 Jan 2004 Jem Berkes (jb@users.pc9.org) wrote:
> Seems a bunch of stuff appeared today, 2004-01-26
> Mimail.Q
> MiMail.R
> Mydoom
> Novarg
> Shimg
>
> (Some of these probably refer to the same thing). Anyway, for the benefit
> of those who want to filter them using procmail or whatever, here are
> arbitrary strings from the bodies of the encoded parts. [...]

Another option if you use procmail is to use Dallman Ross's Virus
Snagger recipes. I discuss plugging them into your procmail setup
here:

 <http://www.ii.com/internet/robots/procmail/qs/#viruses>

They are snagging a lot of viruses for me right now!

Hope this helps,
Nancy 

-- 
Nancy McGough
Infinite Ink ~ <http://www.ii.com>
Deflexion & Reflexion (my atom-enabled blog) ~ <http://deflexion.com>