For this exact virus i used


B~send you +this file +in order to have your +advice:NUL
B~Espero me +puedas ayudar +con el archivo que te +mando:NUL
B~Este es el +archivo con +la informaci�n que me +pediste:NUL

remove all the +.  I stuck them in so responses would not be blocked.

I haven't seen any since I stuck this in last week.

Chet



---------- Original Message ----------------------------------
From: Thomas Deliduka <[EMAIL PROTECTED]>
Reply-To: [EMAIL PROTECTED]
Date: Mon, 30 Jul 2001 11:17:40 -0400

>Okay, so I added this to my Imail Rules as per suggestions on this list:
>
>B~name=.*\pbat:NUL
>B~name=.*\pexe:NUL
>B~name=.*\ppif:NUL
>B~name=.*\plnk:NUL
>B~name=.*\pcom:NUL
>
>But there's a pretty bad problem here.
>
>Sometimes when encoding .jpg files or some other non-blocked filenames
>within the encoding actually is "bat" or something else.
>
>In fact, here is just one line of many from the source of an e-mail which
>had a .jpg file attached to it:
>
>e/8AHdjp/wBwzj8OvtRRX0SweHsvc6L9P8vxfc+eWNxGnvvp+PL5/wB5nBat8W7P/n4veP8A
>
>Notice near the end 'Bat' and it was flagged by the rule because it looks
>for any number of characters up until the 'bat'
>
>What can I do to fix this.
>--
>
>Thomas Deliduka
>IT Manager
>     -------------------------
>New Eve Media
>The Solution To Your Internet Angst
>http://www.neweve.com/
>
>
>
>Please visit http://www.ipswitch.com/support/mailing-lists.html
>to be removed from this list.
>
>An Archive of this list is available at:
>http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
>


Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/

Reply via email to