>From my phone, so excuse my brevity. It might be worth your while to build
>cyr_virusscan. It comes with the distribution but doesn't build by default.
>It should be able to scan your mail spool and remove viruses (things that
>match a virus signature) for you. You could create a signature us
Hi Jason,
We have run into this a number of times with various spear phishing
messages.As a result, we cobbled together a total hack. We have a
perl tool that searches the mail spool filesystems, (either inboxes only
or a full recursive search) and then searches and replaces the offending
Recently our campus was hit with a particularly bad targeted trojan
attach and the IT overlords sent out a demand that we (a small
department with several hundred mailboxes on our own server) go through
all user mailboxes and actually delete the offending messages. At least
using the admin account
