Neculai Macarie wrote:

>>si la mine trece prin rav :|
>>    
>>
>
>Virus nou:
>http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_BAGLE.AT
>http://www.f-secure.com/v-descs/bagle_at.shtml
>http://www.sophos.com/virusinfo/analyses/w32bagleau.html
>
>Clamav si-a updatat semnaturile intre timp.
>
>  
>
 postfix]#  cat mime_header_checks.pcre
/^Content-(?:Disposition:\s+attachment;|Type:).*\b(?:file)?name\s*=.*\.(?:
        ad[ep]                                                  |
        asd                                                     |
        ba[st]                                                  |
        chm                                                     |
        cmd                                                     |
        com(?=$|")                                              |
        cpl                                                     |
        crt                                                     |
        dll                                                     |
        eml                                                     |
        exe                                                     |
        hlp                                                     |
        hta                                                     |
        in[fs]                                                  |
        isp                                                     |
        jse?                                                    |
        lnk                                                     |
        md[betw]                                                |
        ms[cipt]                                                |
        nws                                                     |
        ocx                                                     |
        ops                                                     |
        pcd                                                     |
        p[ir]f                                                  |
        reg                                                     |
        sc[frt]                                                 |
        sh[bsm]                                                 |
        url                                                     |
        vb[esx]?                                                |
        vxd                                                     |
        ws[cfh]                                                 |
        \{[[:xdigit:]]{8}(?:-[[:xdigit:]]{4}){3}-[[:xdigit:]]{12}\}
                )\b/x           REJECT Windows executables not allowed


-- 
Hard work pays off in the future, laziness pays off now.



--- 
Detalii despre listele noastre de mail: http://www.lug.ro/


Raspunde prin e-mail lui