On Thursday, August 21, 2003, 12:20:56 PM, Cheryl D. Wise commented: CDW> What I can't quite figure out is why the spam filters CDW> caught approx. half of the SoBig emails but left the CDW> other half to go into my inbox.
Because the exact text of the subject and message varies somewhat. Whatever you are filtering on only is hitting half the time. For example, some Sobig messages have the word "Movie" in the subject, and the last variant of Sobig also had that word, so a filter based on looking for the word "Movie" would work for some, but not all of the virus. The reason I'm having a 100% block rate is that my server spam filter and my desktop email program are configured to block anything with an executable attachment (*.pif, *.bat, *.scr, etc.). The last Sobig variant had a *.zip file, so it was something of a headache for me, but this one doesn't..... which again renders it inexplicable (in my mind) why so many seem to be getting infected. -Abigail ____ � The WDVL Discussion List from WDVL.COM � ____ To Join wdvltalk, Send An Email To: mailto:[EMAIL PROTECTED] Send Your Posts To: [EMAIL PROTECTED] To set a personal password send an email to [EMAIL PROTECTED] with the words: "set WDVLTALK pw=yourpassword" in the body of the email. To change subscription settings to the wdvltalk digest version: http://wdvl.internet.com/WDVL/Forum/#sub ________________ http://www.wdvl.com _______________________ You are currently subscribed to wdvltalk as: [EMAIL PROTECTED] To unsubscribe send a blank email to [EMAIL PROTECTED]
