hrm, I didn't mean to send this. I read the original post, decided my
post added nothing, and then hit ^x instead of ^c.
doh!
On Tue, 24 Jul 2001, John Jetmore wrote:
>
> We've caught at least one example of this using a .bat extension
>
> On Tue, 24 Jul 2001, Justyn's Lists wrote:
>
> >
> > So all we are needing to add to the system filter to catch the new worm
> > is the lnk extension?
> > anything else I am missing?
> > thanks,
> > -jm
> >
> > > -----Original Message-----
> > > From: exim-users-admin@??? [mailto:exim-users-admin@exim.org]On
> > > Behalf Of Chris Edwards
> > > Sent: Monday, July 23, 2001 11:27 AM
> > > To: exim-users@???
> > > Subject: [Exim] W32/Sircam worm
> > >
> > >
> > > Like many sites we're seeing loads of W32/Sircam worms:
> > >
> > > http://www.sophos.co.uk/virusinfo/analyses/w32sircama.html
> > >
> > > Moreover, one of the various suffixes it uses seems to be ".lnk"
> > > which the current system_filter doesn't seem to deal with.
> > >
> > > Chris
> > >
> > >
> > > --
> > > Chris Edwards University of Glasgow
> > > Computing Service,
> > > C.Edwards@??? Glasgow, Scotland. Phone: +44
> > > 141 330 4892.
> > >
> > >
> > >
> > > --
> > > ## List details at
> > http://www.exim.org/mailman/listinfo/exim-users Exim details at
> > http://www.exim.org/ ##
> >
> >
> >
> > --
> > ## List details at http://www.exim.org/mailman/listinfo/exim-users Exim details at http://www.exim.org/ ##
> >
>
> __________________________________________________________________
> John Jetmore ** jetmore@??? ** 812.461.3355 x1229
>
>
__________________________________________________________________
John Jetmore ** jetmore@??? ** 812.461.3355 x1229
