We've caught at least one example of this using a .bat extension
On Tue, 24 Jul 2001, Justyn's Lists wrote:
>
> So all we are needing to add to the system filter to catch the new worm
> is the lnk extension?
> anything else I am missing?
> thanks,
> -jm
>
> > -----Original Message-----
> > From: exim-users-admin@??? [mailto:exim-users-admin@exim.org]On
> > Behalf Of Chris Edwards
> > Sent: Monday, July 23, 2001 11:27 AM
> > To: exim-users@???
> > Subject: [Exim] W32/Sircam worm
> >
> >
> > Like many sites we're seeing loads of W32/Sircam worms:
> >
> > http://www.sophos.co.uk/virusinfo/analyses/w32sircama.html
> >
> > Moreover, one of the various suffixes it uses seems to be ".lnk"
> > which the current system_filter doesn't seem to deal with.
> >
> > Chris
> >
> >
> > --
> > Chris Edwards University of Glasgow
> > Computing Service,
> > C.Edwards@??? Glasgow, Scotland. Phone: +44
> > 141 330 4892.
> >
> >
> >
> > --
> > ## List details at
> http://www.exim.org/mailman/listinfo/exim-users Exim details at
> http://www.exim.org/ ##
>
>
>
> --
> ## List details at http://www.exim.org/mailman/listinfo/exim-users Exim details at http://www.exim.org/ ##
>
__________________________________________________________________
John Jetmore ** jetmore@??? ** 812.461.3355 x1229
