New Virus (again)

[LA_MERC_LaTech]

Hey,

Just a heads-up...am at a seminar (online) with M$oft...

They expect Sobig to be re-released as a new version within a week.

Just FYI.

LaTech

[}{y|3ri|)]

great, more things for me to do at work here 0.o

[roXet]

:0 H
*^Content-type: (multipart/mixed)
{
#
# Look at the body to find out if there is some .ocb or .vbs
# or... attached,
# if yes, send the mail to /dev/null

:0 B
*^Content-Disposition: (attachment|inline)
*filename=".*\.(ocx|vbs|wsf|shs|exe|com|bat|chm|pif|vbe|hta|s cr)"
{
:0
# /dev/null
/catch
}
#.... other rules
}

[LA_MERC_Cowboy_From_Hell]

Umm....roX???
:dunno :help :crazyeye :doh

Scott

[LA_MERC_Maverick]

LMAO!! I was thinking the same thing Scott

[zeatoR]

There are hundreds of new viruses every day. Posting of every new virus = bad idea. :)

[zeatoR]

And please tell me your not stupid enough to use windows as servers :D

[roXet]

bb, that's the procmail recipe I'm using to filter out all the sobig now. =)