Anyone here using F-Prot 6 with their Declude antivirus setup? Does it
still have the command line scanner?
--SJ
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. The archives can
Don't know - but it has a hefty price for legit use on a mail server unless
they have changed with the new version
_
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
SJ.Stanaitis
Sent: Wednesday, August 22, 2007 8:39 AM
To: declude.junkmail@declude.com
Subject:
Updated filter line to:
(?i:(Click|login|link).{0,50}http://((?:25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?
)\.){3}(?:25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?))
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David
Barker
Sent: Tuesday, August 21, 2007 10:14 AM
To:
Here are two links from antivirus vendors that describe the template the
Storm botnet has been putting out. These should be very useful in
crafting regexp to catch them all based on their body text.
http://www.f-secure.com/weblog/#1255
http://www.f-secure.com/weblog/#1255