Jump to content


W32.Novarg Filter

  • Please log in to reply
No replies to this topic

#1 marke


    Posting Freak

  • Moderator
  • PipPipPipPipPipPip
  • 2,651 posts
  • Gender:Male
  • Location:Christchurch, New Zealand

Posted 28 January 2004 - 09:14 AM

Here is a filter I am using to knock out the W32.Novarg virus. This is the first filter in my filters.txt file and automatically delets the offending emails. - Blitzed over a hundred today!
[enabled],W32.Novarg,W32.Novarg,16711680,OR,Delete,TakesPrecedence,noreport,Automatic,Body,containsRE,(document|readme|doc|text|file|data|test|message|body)\.(exe|.pif|scr|cmd|bat|zip),Body,containsRE,"(mail transaction failed\. partial message is available)|(The message contains Unicode characters and has been sent as a binary attachment)|(The message cannot be represented in 7\-bit ASCII encoding and has been sent as a binary)"

Best regards,

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users