Here's some code someone sent me:
# -- Badtrans Virus
if $message_body contains "TVqQAAMAAAAEAAAA//"
then
fail text "Your machine appears to be affected with the W32.Badtrans.B@mm worm."
endif
Jan Erik Amundsen wrote:
> Happy hollodays to all in this mailing list.
>
> On exims home page there is a exim filter to download that will remove
> melissa virus and other malware, but it dosen't remove W32.Badtrans.B@mm
> virus.
>
> I was hoping that this exim filter could be updated.
>
> Thanx
>
> Jan Erik
>
> --
>
> ## List details at http://www.exim.org/mailman/listinfo/exim-users Exim details at http://www.exim.org/ ##