On Mon, 6 Jun 2005, Rick Macdougall wrote:
> Ronald I. Nutter wrote:
>
> >Anyone seeing this type of email coming through with a header of
> >*WARNING* YOUR EMAIL ACCOUNT WILL BE CLOSED ?
> >
> >Didn't know if someone already had a ruleset out before I starting
> >working on one for my system.
> >
>
> That is a Mytob virus variant. Maybe you should install a virus scanner
> like clamav.
>
> Rick
Yes, that text is associated with a Mytob virus variant and if it's
in a "live" virus clamav will kill it.
However I've seen a number of those from "stillborn" virus mis-fires and
clamav will ignore those (IE the text is there but the "payload" is either
truncated or totally missing).
That then, is a job for SA.
--
Dave Funk University of Iowa
<dbfunk (at) engineering.uiowa.edu> College of Engineering
319/335-5751 FAX: 319/384-0549 1256 Seamans Center
Sys_admin/Postmaster/cell_admin Iowa City, IA 52242-1527
#include <std_disclaimer.h>
Better is not better, 'standard' is better. B{
