There is a virus that make a reply to all inbox messages and send mail attaching itself
It is very difficoult to catch because il is a reply to a valid mail
Have someone some idea of a rule to catch it ?
i found that it is positive to FORGED_MUA_OUTLOOK at now
Someone know how to remove attachements when a message is positive to a single rule ?
New virus difficoutl to catch
- shawniverson
- Posts: 3650
- Joined: 13 Jan 2014 23:30
- Location: Indianapolis, Indiana USA
- Contact:
Re: New virus difficoutl to catch
Can you identify the attachment somehow in MailScanner?
SpamAssassin won't remove attachments. I'm not sure there is some way to inform MailScanner to remove the attachment via SA....
SpamAssassin won't remove attachments. I'm not sure there is some way to inform MailScanner to remove the attachment via SA....
-
- Posts: 389
- Joined: 23 Apr 2015 09:45
Re: New virus difficoutl to catch
attachment name changes each time, i think that there is no way
the only way can be to remove attachments in high score spam (and can be useful)
the only way can be to remove attachments in high score spam (and can be useful)
- shawniverson
- Posts: 3650
- Joined: 13 Jan 2014 23:30
- Location: Indianapolis, Indiana USA
- Contact:
Re: New virus difficoutl to catch
Are the content similar? You could identify it using a custom signature perhaps?