Re: Son of Swen?

["John L. Fjellstad" <john-debian@fjellstad.org>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Friday 26 September 2003 08:39, Ross Boylan wrote:
> I just received a MS upgrade worm that appears to have a complete
> executable that's 0.1k.  So the whole message is quite brief.

That one has been around a while, hasn't it?  
I use this procmail filter, and it seems to pick up all the variations (except 
the one where the viruscompany has replaced the executable with a space 
filled file of same size). http://www.spamless.us/pub/procmail/virussnag.rc

- -- 
John_________________________________________________________________
email: john-debian@fjellstad.org        Quis custodiet ipsos custodes
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)

iEYEARECAAYFAj9z9LMACgkQkz0vhQtHHRhaxgCgln0bS1nJwOMLaABsCMdUF4pi
ERMAoJqr4gmDChzttvg27pc5BL9rBIlJ
=rZ76
-----END PGP SIGNATURE-----