Webmaster Oilfield Directory wrote:

> ohhhhhh great i just got one of those files... how do i block them with
> regex etc... thanks !

I'm using:
/^UEsDBAoAAQAAA/ DISCARD

Not sure if this will block all password protected zips, or even if it 
blocks all Bagle variants.  I received two prior to implementing this and 
they both had that signature.  I have blocked one since implementing it and 
it was a virus.

-- 
Chris Scott
Host Orlando, Inc
http://www.hostorlando.com/

Reply via email to