Jump to content


Photo

W32.Novarg Filter


  • Please log in to reply
No replies to this topic

#1 marke

marke

    Posting Freak

  • Moderator
  • PipPipPipPipPipPip
  • 2,651 posts
  • Gender:Male
  • Location:Christchurch, New Zealand

Posted 28 January 2004 - 09:14 AM

Hi
Here is a filter I am using to knock out the W32.Novarg virus. This is the first filter in my filters.txt file and automatically delets the offending emails. - Blitzed over a hundred today!
CODE
[enabled],W32.Novarg,W32.Novarg,16711680,OR,Delete,TakesPrecedence,noreport,Automatic,Body,containsRE,(document|readme|doc|text|file|data|test|message|body)\.(exe|.pif|scr|cmd|bat|zip),Body,containsRE,"(mail transaction failed\. partial message is available)|(The message contains Unicode characters and has been sent as a binary attachment)|(The message cannot be represented in 7\-bit ASCII encoding and has been sent as a binary)"


Best regards,




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users