-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Friday 26 September 2003 08:39, Ross Boylan wrote: > I just received a MS upgrade worm that appears to have a complete > executable that's 0.1k. So the whole message is quite brief.
That one has been around a while, hasn't it? I use this procmail filter, and it seems to pick up all the variations (except the one where the viruscompany has replaced the executable with a space filled file of same size). http://www.spamless.us/pub/procmail/virussnag.rc - -- John_________________________________________________________________ email: [EMAIL PROTECTED] Quis custodiet ipsos custodes -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.1 (GNU/Linux) iEYEARECAAYFAj9z9LMACgkQkz0vhQtHHRhaxgCgln0bS1nJwOMLaABsCMdUF4pi ERMAoJqr4gmDChzttvg27pc5BL9rBIlJ =rZ76 -----END PGP SIGNATURE----- -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
