W32.Novarg Filter

[marke]

Hi

Here is a filter I am using to knock out the W32.Novarg virus. This is the first filter in my filters.txt file and automatically delets the offending emails. - Blitzed over a hundred today!

[enabled],W32.Novarg,W32.Novarg,16711680,OR,Delete,TakesPrecedence,noreport,Automatic,Body,containsRE,(document|readme|doc|text|file|data|test|message|body)\.(exe|.pif|scr|cmd|bat|zip),Body,containsRE,"(mail transaction failed\. partial message is available)|(The message contains Unicode characters and has been sent as a binary attachment)|(The message cannot be represented in 7\-bit ASCII encoding and has been sent as a binary)"

 

Best regards,