Re: [Exim] W32/Sircam worm

Top Page
Delete this message
Reply to this message
Author: Jim Tittsler
Date:  
To: exim-users
Subject: Re: [Exim] W32/Sircam worm
On Tue, Jul 24, 2001 at 08:56:08AM -0500, Justyn's Lists wrote:
> So all we are needing to add to the system filter to catch the new worm
> is the lnk extension?
> anything else I am missing?


I wonder about the use of \w in a couple of Nigel's suggested
regexes because I believe it is locale dependent. It seemed to
miss a couple of Japanese filenames generated by this latest
worm. (Presumably because they contained chars (bytes) that
are not in the word character table in my default locale.)


-- 
Jim Tittsler, Tokyo
Python Starship     http://starship.python.net/crew/jwt/