RE: [IMail Forum] W32/SirCam@mm

[R. Scott Perry]

>I have protected my users with three rules...
>
>B~filename=".*\pvbs":NUL
>B~filename=".*\pscr":NUL
>B~filename=".*\pbat":NUL
>
>And YES it does block all .VBS files, .SCR files, and .BAT files... But
>my users are protected.

You also need to add .EXE, .COM, .LNK, and .PIF, which Sircam sends out as 
well.  And, you might also want to add just "name=" not just "filename=" to 
protect yourself further.

                                                            -Scott

Declude: Anti-virus, Anti-spam and Anti-hijacking solutions for 
IMail.  http://www.declude.com



Please visit http://www.ipswitch.com/support/mailing-lists.html 
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/