I thought on the magistr virus every 5th address was possibly not altered? Are all the return addresses bad? I have chosen not to skip this one to the sender as 20% of the time it reaches the infected sender. Maybe not exactly 20% but some success anyway...
On Thursday, April 25, 2002 7:18 AM, R. Scott Perry <[EMAIL PROTECTED]> wrote: > >>Now I don't know which address (nmiller or mmiller) Declude sends it's "you >>sent a virus" message to. Maybe Scott can answer that, but if it is the >>wrong address then sending that message to the sender could be >skipped. > >Declude Virus sends to the return address (from the SMTP envelope), which >in the case of Magistr is the altered address. So skipping the sender >notification (adding "SKIPIFVIRUSNAMEHAS Magistr" to the sender.eml file) >would be a good idea. > -Scott > >--- >[This E-mail was scanned for viruses by Declude Virus >(http://www.declude.com)] > >This E-mail came from the Declude.Virus mailing list. To >unsubscribe, just send an E-mail to [EMAIL PROTECTED], and >type "unsubscribe Declude.Virus". You can E-mail >[EMAIL PROTECTED] for assistance. You can visit our web >site at http://www.declude.com . > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
