Jump to content

W32.Novarg Filter


Recommended Posts


Here is a filter I am using to knock out the W32.Novarg virus. This is the first filter in my filters.txt file and automatically delets the offending emails. - Blitzed over a hundred today!

[enabled],W32.Novarg,W32.Novarg,16711680,OR,Delete,TakesPrecedence,noreport,Automatic,Body,containsRE,(document|readme|doc|text|file|data|test|message|body)\.(exe|.pif|scr|cmd|bat|zip),Body,containsRE,"(mail transaction failed\. partial message is available)|(The message contains Unicode characters and has been sent as a binary attachment)|(The message cannot be represented in 7\-bit ASCII encoding and has been sent as a binary)"


Best regards,

Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Create New...