RE: [IMail Forum] New widespread virus: W32/Nimda-A; arriveswit h readme.exe attachment

[R. Scott Perry]

>Can the domai processing rules stop this?

You may want to try a rule that looks for "Content-ID: <EA4DMGBP9p>".  Two 
of the viruses that we have here have the that text hard-coded in them.  Or 
you could use "--====_ABC1234567890DEF_====" that also appears.  Both of 
those are seemingly random enough that they shouldn't catch any legitimate 
mail.

True virus scanning is the best bet, but with this one it's probably worth 
adding the extra filtering to IMail on the above strings just to be extra 
cautious.

                                                    -Scott
---
Declude: Anti-virus, Anti-spam and Anti-hijacking solutions for 
IMail.  http://www.declude.com


Please visit http://www.ipswitch.com/support/mailing-lists.html 
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/