>Would the notification emails be something like this:
>
>SKIPIFVIRUSNAMEHAS Magistr
>SKIPIFVIRUSNAMEHAS Kelz
Like this -- although I'd use "Klez" instead. :)
>SKIPIFVIRUSNAMEHAS W32/Magistr.b@MM; W32/Klez.h@MM; W32/Hybris.worm.B
This way will not work. This will look for a virus that has
"W32/Magistr.b@MM; W32/Klez.h@MM; W32/Hybris.worm.B" in the name, which
won't occur.
>Also would you need the whole name of the virus?
No, you do not. If there is a partial match, the notification will not get
sent out. So "Klez" will cover all the Klez variants. That way, you don't
have to worry about having to add a line for future variants.
-Scott
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus". You can E-mail
[EMAIL PROTECTED] for assistance. You can visit our web
site at http://www.declude.com .
