[Exim] badtrans virus

Etusivu
Poista viesti
Vastaa
Lähettäjä: Todd Lattimer
Päiväys:  
Vastaanottaja: exim-users
Aihe: [Exim] badtrans virus
Hi Guys,

Just wondering is anyone has written a successful filter to block the
badtrans virus.
I've written a VERY crude one (shown below) which has very limited and
marginal success.

cheers
Todd

#Badtrans
if $message_body contains "TVqQAAMAAAAEAAAA//"
then fail text "Your machine appears to be affected with the
W32.Badtrans.B@mm worm."
endif
# End Badtrans