> > I don't normally create my own sig's but this morning we are getting a > lot of these. ClamAV is not detecting anything. Below is a sig , below > is one of the messages. My concern before I put this into production is > that my sig attempt may be to broad and catch things that shouldn't. > > > R0lGODdhuAGkAYAAAP///wAAACwAAAAAuAGkAQAC/owRiGetqYBcTiZ2j3X6wZ9dHgdZlOlFZbdM > psi4DXlWbgvW2oyH8b+ZiB6bDCpUlM2WQeEnGRNCe6TfE2Z13lrNSulFC4OYYOaXDE7KUDVixD3k
It seems to me it would be less machine effort to look for this pattern in a message and reject or tempfail it: R0lGODdhuAGkAYAAAP According to the google searches I've done the onl place this shows up is in these spamograms. dp _______________________________________________ http://lurker.clamav.net/list/clamav-users.html
