Try:
http://www.trendmicro.com/vinfo/virusencyclo/default2.asp?m=q&virus=Zerolin&; alt=Zerolin -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Spaminator Sent: Wednesday, 06 October 2004 16:53 To: [EMAIL PROTECTED] Subject: [IMail Forum] Zerolin Virus Information Greetings all, Three variants of Zerolin keep getting through Imail AV Pro. Symantec doesn't even list Zerolin in its virus DB; McAfee does list the three variants, but doesn't list anything specific about the subject, body content, etc. on which I can base an inbound rule (this is a DHTML exploit, so there's no attachment). http://vil.nai.com/vil/content/v_128375.htm The messages are filtered out by anti-spam and delivered to the spambox, so you'd think I could just look at the spambox to build a rule based on the actual message, but each of the spamboxes in question have tons of spam messages each day. It would take me many, many hours to look through just one, and I would probably miss it. Anyone know what I should be looking for? I've tried a general Google search with little luck. Thanks! To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
