[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: mymail worm



-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Wed, Feb 04, 2004 at 01:59:32AM +0000, Antony Gelberg wrote:
> Anyone have a similar rule to nuke this new mymail worm?  I have some
> samples if anyone can tell me how to analyse them to paste the correct
> thing in the BD line.

Sure do!

http://ursine.ca/~baloo/clamd-exiscan.txt

- -- 
 .''`.     Paul Johnson <baloo@ursine.ca>
: :'  :    
`. `'`     proud Debian admin and user
  `-  Debian - when you have better things to do than fix a system
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)

iD8DBQFAIb6tUzgNqloQMwcRAiI+AJwKV0frAfLmJ6cmgdH1GbOgMEuGOwCfYbbD
WE4q6DYzp4NhJ6im1PcJQwM=
=ETe4
-----END PGP SIGNATURE-----



Reply to: