[Exim] Encrypted Viruii

We are seeing more of these emails with an encrypted zip file containing
a virus with the password in the text. You would have to be a very
stupid user to fall for this, but are we the only site to have one or
two very stupid users...?

As the anti virus software cannot open the zip it cannot find the virus,
so what is the best approach. I was wondering if there is a solution in
the new mime acl (acl_smtp_mime) in exiscan. I don't have the expert
knowledge for this, but would it not be possible to use this to say if
you cannot open this part of the email then reject it.

If anybody has a good working solution then I would be happy to hear
from you.

Ron

--
Ron McKeating
Senior IT Services Specialist
Internet Services and Software Solutions
Loughborough University
01509 222329