When we had the last virus outbreak, I wrote a fast piece of code that
removed every instance of the virus from a persons mail box (it was part of
my custom spam filter). I've done the same for this one as well.
<CFLOOP QUERY="qSpam">
<CFIF len(ATTACHMENTS) and (REFindNoCase('\.pif|\.scr|\.cmd|\.bat',
attachments) OR REFindNoCase('^(hi|test|mail delivery
system|status|hello|error|Mail Transaction Failed|Server Report|Message
status from e-mail system|failure notice)$', subject))>
<CFSET lDeleteUID=ListAppend(lDeleteUID, UID)>
</CFIF>
</CFLOOP>
Basically, I want to kill every message with an attachment of pif, scr, cmd
or bat. Additionally, if the message has an attachment and a specific
subject, I want that deleted as well. It's not foolproof (my full version
makes sure eml attachments are never deleted) but will work for most people.
Personally, 1/4 of my normal mail and over 1/2 of my admin mail has been
this virus.
My personal recomendation are to either:
1. Get iMS with the built in Prism AV scanner
2. Get a third party AV scanner for your mail system
3. Write your own cleaner
Fun. :)
[Todays Threads] [This Message] [Subscription] [Fast Unsubscribe] [User Settings]
