Looks like there's a new email worm going around that's becoming a problem.
*http://www.us-cert.gov/current/index.html#here_you_have_email_malware*<http://www.us-cert.gov/current/index.html#here_you_have_email_malware> http://www.avertlabs.com/research/blog/index.php/2010/09/09/widespread-reporting-of-here-you-have-virus/ http://threatpost.com/en_us/blogs/new-email-worm-turns-back-clock-virus-attacks-090910 Anyone have a regex to block these emails? It looks like they're links that appear to be a PDF but it's really a .scr file. Would: http:\/\/[\w\.\/\-]{10,500}\.scr work? I'm thinking this would block http:// followed by 10-500 letters, numbers, underscore (\w), a dot (\.), a slash (\/) or a dash (\-) followed by .scr, but I'm terrible with regex, especially in ASSP. Suggestions? ------------------------------------------------------------------------------ Automate Storage Tiering Simply Optimize IT performance and efficiency through flexible, powerful, automated storage tiering capabilities. View this brief to learn how you can reduce costs and improve performance. http://p.sf.net/sfu/dell-sfdev2dev _______________________________________________ Assp-test mailing list Assp-test@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/assp-test
