RE: [Exim] the Klez virus

> i'm having a bit of trouble filtering emails infected by the klez
> virus. I'm currently using system_filter.exim, which works well,
> but klez seems to be able to get through. Does anyone have any
> suggestions?

I'm using:

if $message_body contains "iframe" then
freeze text "I-FRAME"
endif

Which I culled from this mailing list earlier.